last executing test programs: 2m11.052068539s ago: executing program 4 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010203b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x48010) close(r2) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x3ff, 0xe3, &(0x7f0000000040)="c8df58f975e00d55f1ecc177739796d02b04f5413f34b0fb85cf83adb1e249163d0fe28f6390a2ff6fdad4baa0c1a9c56516510bf58f48bf41334458114d4c5624413506663f81355e4afd19ed1a9a13e3d5136bca4e1ffb6ba325437bbf0c983f053c5fd191b401b7e826722bb29520193ac42e900dfb73bbad277b9e7a1f9f091dc8961c706e2b243542fb476a0bb425b03ff2a8b5131521e9b71bd442e3117fc5e08b75616383350fc4f37c2e51953caa6c8192c8a81be0d4fa4bc6fb0b08f220820b8f1e105ca61ef986791da0606225a48b9d3c42a1c09f66928b590273a155f3", 0x1, 0x1}, {0x9, 0xe4, &(0x7f0000000140)="8f26437d6b8aac3319825802ec28178ff338334be77a62c9b8bc4858e0b078240f4a60d50de228609bb158303e8b0c739140c6c1bd3904941ad077a10abd5e78d7eab292ae39a427db5166c0c076486a6d84df56dbc7fbbc809bf57df7fccdc6ce0ee78aa6d5b3d20821086cda2fb64ff2515defe05b659b1b20d4ce53c54d515095d617ec2aeea9001bda7c50a11c9fb754f9c4bc5308497039a3d083e1712eb493adced51dde77cd99f0c65e24acba23bbe6085c050ff9c5e549d6e8f1d8e395dea6c5d93884a06359a387963f99a0f509edf1b848e615cc771ee9a905eb937a8feebb", 0x1, 0x1}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='sched_process_hang\x00', r5, 0x0, 0xcccc}, 0x18) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x2, 0xd8, 0x5) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300), 0x10) 2m10.910899074s ago: executing program 4 (id=1511): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r3, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000100000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) syz_emit_ethernet(0x20f, &(0x7f0000000e40)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r9}, 0x10) ppoll(&(0x7f0000000100)=[{r6}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES16], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='siox_get_data\x00', r10, 0x0, 0x8000000000000000}, 0x47) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x0, 0xf00) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xf1, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x0, 0x3c, 0xe3, 0x68, 0x0, 0x6, 0x6, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@cipso={0x86, 0x1c, 0x3, [{0x7, 0x6, "bf2a6b64"}, {0x1, 0x10, "cef1d62f8b49d819c0a07ef7572e"}]}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x400}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7}, {@multicast1, 0x5}, {@multicast2, 0xffffffff}, {@local, 0x100}]}, @ssrr={0x89, 0x17, 0x3b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @empty]}, @cipso={0x86, 0x14, 0x3, [{0x0, 0xa, "64be6b6b3891b737"}, {0x1, 0x3, "89"}, {0x1, 0x2}, {0x2, 0xe, "62049dbfbca7bc3b380d9289"}, {0x0, 0x8, "ae7b931acdb3"}, {0x2, 0xf, "32802e151b9c8145022788196c"}, {0x0, 0x9, "6582e680abe830"}]}, @generic={0x44, 0x8, "fb2fdf564dc1"}]}}, @payload_direct={{{{0x23, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x1, 0x0, 0x0, 0x5, 0x2, 0x3, 0x1ad, 0x0, 0x1, 0x4e23, 0x4e24}, 0x4, 0x1}}, [0x0, 0x0, 0x0]}}}}}, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r0, 0x0) 2m9.997546566s ago: executing program 4 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000100)={'some', 0x20, 0x5, 0x20, 0xff}, 0x2f) r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x25, &(0x7f0000000140), &(0x7f00000001c0)=0x4) close(r3) close(r4) 2m9.750089635s ago: executing program 4 (id=1523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='cachefiles_mark_active\x00', r3, 0x0, 0x4000000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xe, 0x8000000003, 0x8000000000000001, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x8004) shutdown(r2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x11000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x100}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x44}}, 0x4000) 2m8.800801596s ago: executing program 4 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, 0x0, 0x20000000) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2, @ANYRES16=r4], 0x4c}}, 0x40000) syz_emit_ethernet(0x38f, &(0x7f00000020c0)={@local, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x359, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, [{0x1, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0xe, 0x1, "00000000000000000800ee00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x2, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcf98a142ec1876de04ca4682fb87790a7855b4e6fa3b20519bbaa8a029cee00b8d3485efe68a356f542b043059ff05912fb0000000000"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {}]}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) 2m7.398572146s ago: executing program 4 (id=1535): r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000001c0)=0x80000001) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) 2m6.932040791s ago: executing program 32 (id=1535): r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000001c0)=0x80000001) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) 5.895536345s ago: executing program 0 (id=2604): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x36f}], 0x1}, 0x0) socket(0x21, 0x3, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) 5.698547119s ago: executing program 0 (id=2606): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xc0, 0x7, 0x2, 0x80000001, 0x5, 0xc806, 0x7, 0x6, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0x96, "f2a71ca403a2f38585b3433b11320f4088a03fed5c73be1e054010dbd7fff743f27aa1cc1d1266e38ec0f4ac363e1d5fff500726b82b56b8c26fddb45b25426058a8ae97581a23890b978c5f0e137a4b96db97930a346216726446f88c1a51d297feee61cf0febcf49aafaf340b2d84b50cb099064e0e84f81d1ed1fc0879c4af8e8c6b24c410623d9a1e70a1eecc0d13740f21b175f"}, &(0x7f0000000180)=0x9e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0x39, 0x1000, &(0x7f00000001c0)="5fe2778018bf47481bcc4dd12fba0863e9bc967146f50edc79f845357ff71e72e8a657412f70bd90b4acec4fc2dfefb22cce1d1be1a5282612", &(0x7f0000000200)=""/4096, 0x8, 0x0, 0x72, 0x0, &(0x7f0000001200)="335c896887394a770e02fd72ca9701cad329ae858545d8891f912fea8a14c449035fc1c2794b84dd9ccd504676ad6e0266b140dc90e8dc2389ef0cfd009537f24e986406b0895f0249de918e2823c073c2681e2a97d7ec4503abcc128efbf22f63e498e0ebc6c7736599c921ccfeffef89b1", &(0x7f0000001280), 0x6, 0x0, 0x8000}, 0x50) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001340)) syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r0) r2 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000f, 0x10, r0, 0x17e50000) listen(r0, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000520}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, 0x1404, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20080044}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000014c0)={{0x233, 0x3}, 0x100, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001600)={0x2, 'veth1_to_bond\x00', {0x7}, 0x8}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001640)={'ip6_vti0\x00', {0x2, 0x0, @private}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001680)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002b40)=[{{&(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000001740)="cfe3d5b7ec4fcf4346515495aff1d66487837d6f32e9f10778823f76fb7896b6dcf79dcc3a930a34e32d5506e3fffd28ed155776e6307d53d95d8a69b573ce1cd7d804e139fd30ceb9ca7f747ffc346bae38724dc1bd305ac723891478ea6a0c9a6a30d8ade73b53543b60ef134cdf53e0ad999b94e742ba28c5cf07dc4f99050b27a01a1a633de577895e2fed86a03d55fac2a8ecf49281bc5df62a3da4d8c22191a8a7e41f00261195d11f85c463", 0xaf}, {&(0x7f0000001800)="26c7d8ae60f11a880d959f37a8f8722eba5ea22dd52b0dd7022726ec4888d001f9f9a590ea046f27ee9591ae7b38366379aa134f4b1e290a8fbaccae5e36fc", 0x3f}, {&(0x7f0000001840)="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", 0x1000}], 0x3, &(0x7f0000002880)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x4000}}, {{&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002940)="691d1415ae4328e7ca87d2fae500ee7d4809c874d290b589fb22acf1755b6994f8344143e67301666a6dce2651156799f426cbda06870598d47115b514a84421355be666e73b0d82ae4065669476c834762cbd0daf32ba26bc5b0bd99161e30b038699aeb1ecc8b6cf32c8fd93f3403c082280f784362b04111519e6993993aabd3ffdf6e36a747a65d81a74dd81e27aaa59b6f6141e75bc5f77673cf2fed824909ba4e0f2564bf7ead7b5a9c3d1eb513f3c639f7e1f70f1b2675fa00a11a6c8d0f432d4a9efe8ec8ede9ac3a80fcc840b851a5c2d67004e4cb8c0104a3d193d8cdb", 0xe2}, {&(0x7f0000002a40)}], 0x2, &(0x7f0000002ac0)=[@rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x48, 0x8d0}}], 0x2, 0x4000040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44008835}, 0x800) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002d40), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x60, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48045}, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000002e80)=0x1, 0x4) connect$pppl2tp(r0, &(0x7f0000002ec0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x2, 0x4, 0x2, 0x1}}, 0x2e) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000030c0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003080)={&(0x7f0000002f40)={0x130, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xd}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x207c}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8040}, 0x10) socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000031c0)={'syztnl1\x00', &(0x7f0000003140)={'tunl0\x00', 0x0, 0x78c0, 0x20, 0xc97, 0x40, {{0x16, 0x4, 0x0, 0x2a, 0x58, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@rr={0x7, 0x1f, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @multicast1]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xb0, 0x0, 0x9, [0x6, 0xd, 0x287, 0x5, 0x81, 0x6, 0x60000000]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000003300)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000032c0)={&(0x7f0000003200)=@newqdisc={0xac, 0x24, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0x0, 0xb}, {0x1, 0xfff2}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xaf, 0x4, 0xe, 0xd5, 0x0, 0x8000, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x7, 0x2, 0x0, 0x5, 0x0, 0x276, 0xf, 0x5}}, {0xe, 0x2, [0x7, 0x1000, 0x3a, 0x100, 0x0]}}, {{0x1c, 0x1, {0xeb, 0x7, 0x7, 0x8, 0x1, 0x3, 0x81, 0x2}}, {0x8, 0x2, [0x9, 0x8001]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 5.578807636s ago: executing program 0 (id=2609): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r2 = socket$inet(0x2, 0x80000, 0x75) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) unshare(0x8000200) unshare(0x2a020400) write$6lowpan_enable(r3, &(0x7f00000001c0)='1', 0x1) sendto$l2tp(r2, 0x0, 0x2c, 0x4008841, 0x0, 0x0) unshare(0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x2062) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000002c0)=0x6d, 0x4) 5.114906218s ago: executing program 0 (id=2613): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0xff, r13}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x858a8d47f625ca66}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaba2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffc3a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0x2d, 0xc, "3fc23cb5cdb76e24217c54e93811fb1871f562108728dd022d5ff0600bf50b2bc7c1a18ec0f80f428c"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWCHAIN={0xc4, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14}}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 4.22279623s ago: executing program 5 (id=2624): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_newvlan={0x28, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0x28}, 0x1, 0x5502000000000000, 0x0, 0x1}, 0x4000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@multicast1, @private, 0x0, "6069177019716e31e2e0f1fc00", 0x9, 0xfffffffe, 0x3, 0xff}, 0x3c) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) socket$inet(0x2, 0x1, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="32a00000000000003c002b800800030001000000080003000400000008000100", @ANYRES32=r8, @ANYBLOB="015d3b5d", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) (async) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) 3.933651946s ago: executing program 5 (id=2630): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) shutdown(r2, 0x1) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2f, 0x25dfdc01, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x32a, 0xffffffffffffffff, 0x8, 0x3}, 0x4, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44891}, 0x2400c800) 3.739055438s ago: executing program 5 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 3.655239904s ago: executing program 5 (id=2634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="118900000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r1, @ANYBLOB="e306000000000000005f28dff696e26aa937a9d014ff74b54de9480d52f0"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$kcm(0x10, 0x400000002, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x123, 0x0) (async) close(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x800) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfffffffffffffe87) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000001500)={r7, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f9fed5}}}, 0x90) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)='`', 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) recvmmsg$unix(r4, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/134, 0x86}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000480)=""/41, 0x29}], 0x4}}], 0x1, 0xa120, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000140)={'wg1\x00', 0xfffffffffffeffff, 0x6}) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$nci(r9, 0x0, 0x0) 3.272706563s ago: executing program 5 (id=2637): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002580)=@newchain={0x40bc, 0x64, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0x5, 0xd}, {0x0, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x408c, 0x2, [@TCA_BASIC_ACT={0x2638, 0x3, [@m_ctinfo={0x1040, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2dc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}, @m_xt={0x1288, 0xc, 0x0, 0x0, {{0x7}, {0x1204, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x6f, 0x6, {0x5, 'raw\x00', 0x80, 0x9, "8577d6f4557d471d7e963b8552fe88a1458647aa46c74be10be5ca340681ac0c3519c72d793242d2fc8bd353d32e4aa1bc64463e068e8104e11f081293840109c01b04e4b9"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x23d, 'mangle\x00', 0xf, 0x5144, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3be}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xc5, 0x6, {0xebde, 'raw\x00', 0x55, 0x4, "d8020687f9fa249a9f4e0636cc39d6e22ced62cc0507a86ee5f330d49160fbfbd175cd1df84ec92e1057f1bfad6f6cc8f1f6676e1a77075b56577e2ce383035ff484ed09abe9d7ef957a7c5a7780d86a75b429d88832f1e0f8710bdc53f8a14f0fc16bbe38979e6e24e58ad3c5d56465bc5f28d0d39ca423d5cc7325ab809bb0095bb0825a1cd1418b58e240f1b484db6a75cfb0f693a3e2fe3b91"}}, @TCA_IPT_TARG={0x33, 0x6, {0xc1e, 'filter\x00', 0x0, 0x1, "d0fccde869c5bd4340"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x5f, 0x6, "882b534f8f069e0717ea883c88f2dc90a396250e06a99db2f71fa94e8f064e6350d83ca44db120fa451e0a7633a6bb3cc8d7208bcee5a6295335b00cc22d27067b1a7cfce86121f0798197e75cb23bddf5b491d83fe9233547f3d8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x1c0, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x7, 0x7, 0x8001}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x0, 0xfffffff9, 0x3}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xf6f, 0x20000000, 0x3, 0x81}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x8, 0x0, 0x5}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3ee3586, 0x3, 0x35, 0x43}, 0x3}}]}, {0xf4, 0x6, "2ffaf4d186d243ed0f9ec2dff2f039fb47f369fe9a0c4bcd679d8e4283152a765498a5961f64b1d12dd5210ed183cd95ced396831d835cd0d960168dd14e9c99c9465552ccd99ccc72bca992867dfe0f6c9a9f41b0a4d754a36c5db9731ebe881f5eb1caa6fb50eb1d2f6913cad1b6052995505abaef42e326bf48596fdd0a333e4aa2bbfca2c4a919d137929a0b25b5abe607be9de8ef57629d5ce812119adfafc1f0d54154c0dedd3ba7fa5ff937f4f73c03961963e175e6f8b88a50498e53355c452bd341b0c893555ee7f70c3093b5101ae97a1204553b83a2f150c25554249561411a59b7a0eab6ff9f319be630"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xdc, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x5}}]}, {0x9d, 0x6, "b6b00d520b6c0ef6ac4299a06873be21094690dfb183d6547b928ab9b0bd8a42c8ec39298bd8a968703b6ac6672244b38d78586521434473b1d778382122f5c7c649b94cd85c662d66771808fcfda4c57b415bef3a42f5e9b1c75b30a44a02961c57bd28c77a1cdf1edeae7d8a5d88e88f03270c982be18ab07eabc8bb2a73811922f71c1bfe8844950de7732c65d53880eb7da53222915ce4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0xd0, 0x16, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="5168741f4194"}]}, {0x9b, 0x6, "90e9c2540a5f6ec63e7e186172d4a7cd4a484e8074a17d5125b540060cea2e529e650eb792839c53a8475942c5f86851fd9a983925304c03950d550e565a7899c2419270067a34ea00799d36c36aaf8a492d2f63215491ec528daae0b77e134ebf7c169a766c47632ba3c1af16aeb12885a43388e1d2b634eca3af76bb9b5ee6ae6a1e0531883b38fae59dcad13a4998c4b7bf14a30c76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x9}}, @TCA_BASIC_POLICE={0xc38, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa96, 0x9, 0x3, 0x2, 0x9, 0x9, 0xffffffae, 0x4, 0x4, 0xeb5, 0x4d, 0x0, 0x8, 0x7, 0x401, 0x3, 0x5, 0x6, 0x4, 0x1000, 0x7fff, 0x800, 0x2, 0x0, 0x2e, 0x2, 0x2, 0x6, 0x5000000, 0xbb, 0x8001, 0x690c353b, 0xff, 0xf, 0x7, 0x8001, 0x10000, 0x7, 0x0, 0xffffff81, 0xd, 0x4, 0x0, 0x1, 0xe, 0x3d6c, 0xb, 0x9, 0x7f, 0x4, 0x9, 0x6, 0x1, 0x8, 0xdc, 0x0, 0x8, 0xa2b9, 0x8, 0x3, 0x8, 0x10, 0x4, 0x2, 0x5a2adfa7, 0x7c8a, 0x6, 0x0, 0x1671c000, 0xe, 0xf, 0x7, 0x1000000, 0x5, 0x40, 0x0, 0x7, 0x2, 0x0, 0xf9, 0xd, 0x2509, 0x3ff, 0x7fffffff, 0xfa36, 0x1, 0x10001, 0xfffffff7, 0x0, 0x1, 0x8, 0x1, 0x5, 0x5, 0x80000001, 0x1, 0x2, 0x30e, 0x0, 0xb3, 0x3, 0x3, 0x1e2, 0x0, 0xb00, 0x2, 0x6, 0x5, 0x2, 0x800, 0xce3, 0x1, 0x6, 0xd1, 0x6, 0xd, 0x6215, 0x2, 0x10, 0x36ee78f, 0x5, 0x2, 0x3, 0x4, 0x4, 0x2, 0xfffffff7, 0x4, 0x7, 0x9, 0x9, 0x2, 0x2, 0x8, 0x9, 0x6f7b, 0xca53, 0x1, 0xd2a0, 0xf54, 0x8, 0x2, 0x20, 0x1, 0x4, 0x200, 0x2, 0x6, 0x0, 0x3, 0x7, 0x4, 0x0, 0x7, 0x5e792ca4, 0xffffffff, 0x8, 0xfffffffd, 0xd4000000, 0x9, 0x1, 0x1, 0x9, 0x3, 0x0, 0x4, 0x3, 0x0, 0x3, 0xb197, 0x8, 0x80000001, 0x2, 0x6, 0x7, 0x1, 0x7, 0x4, 0x3, 0x25, 0xa, 0x2, 0xfff, 0x82, 0x6, 0xc27, 0xff, 0x6, 0x0, 0x0, 0x3, 0x6, 0x1, 0x78, 0x7, 0x0, 0x5, 0x5750, 0x4, 0x2, 0x3, 0xa, 0x6, 0x7, 0x8, 0x7, 0x1, 0xe3, 0x1ff, 0xa, 0xf, 0x8, 0x3, 0xfffffff7, 0x1, 0x0, 0x7, 0xfffffff2, 0x7, 0x3, 0x401, 0x7, 0xffff63ec, 0x8, 0x6, 0x5e, 0xa, 0x9, 0x403d, 0x9, 0xdfc3, 0x7, 0x6bb, 0x3ff, 0x7d, 0xa, 0xffff7b2f, 0x5, 0x6, 0x2b9, 0x8, 0x9, 0x9, 0xfffffffe, 0xffff, 0xff, 0x50e3, 0x6, 0x4b7, 0x2, 0xe, 0x4, 0xffff, 0x1, 0x19, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0x1, 0x7, 0x8, 0x6, 0x101, 0x84ea, 0x0, 0x7, 0xf25, 0x401, 0xc442, 0x7, 0x4, 0x7, 0x8, 0x61, 0x0, 0xffffffa9, 0x5, 0x4, 0x37, 0xffff, 0xb177, 0xfffffffd, 0x7, 0x1800000, 0x8, 0x8, 0x18, 0x200, 0x8, 0xd, 0x1, 0x80, 0x7ff, 0x4, 0x8731, 0x577c, 0x8, 0x7, 0xb, 0x9464, 0x8, 0x6, 0x5, 0x7, 0xa35, 0xffffffff, 0x8, 0x7ff, 0x33f7, 0x4, 0x6b08, 0x2, 0x6, 0x1, 0x3, 0xd3d5, 0xfffffffa, 0x0, 0x36, 0x8, 0x9, 0x3, 0x80, 0xd, 0x4, 0xfffffffb, 0x3, 0x3, 0x2, 0x100, 0x6, 0x2, 0x2, 0x1, 0x0, 0xe799, 0xa8, 0xffffffff, 0x5, 0x63, 0x10001, 0x6, 0x100, 0x8, 0x8, 0x1000, 0x400, 0x89, 0xffffffff, 0x7fffffff, 0xd74, 0xffff, 0xb, 0x1, 0x40, 0x1ff, 0x8, 0xa, 0xfffeffff, 0x7, 0x5, 0xeaf4, 0x8, 0x6, 0x8001, 0x439aed37, 0x6, 0x4, 0x3, 0x101, 0x5, 0x7ff, 0x5, 0x1, 0x100, 0x5, 0xdfdb, 0x4, 0xef21, 0x1, 0x9, 0x4, 0xd, 0x5, 0xffffff80, 0x9, 0x3, 0x10, 0x8, 0x400, 0x3, 0xd8, 0x7, 0x1, 0x8743, 0x184, 0x1, 0x4, 0x7f, 0x8, 0xff, 0x2, 0x7, 0xf, 0x8, 0x1, 0x3, 0x6, 0x3ff, 0x0, 0x10001, 0x4, 0x7, 0xe, 0x0, 0x80000001, 0x4, 0xd, 0x13, 0xcc5d, 0x10001, 0x9, 0x1, 0x40000081, 0x10, 0x6, 0x2, 0x10, 0xb10, 0x8001, 0x3, 0xbe, 0xfffffffa, 0xb9a, 0x5, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x9, 0xec7, 0x5b, 0x8001, 0x3, 0xd1, 0x6, 0x6, 0x7, 0x8001, 0x2, 0x1, 0xd, 0x800, 0x8, 0x2, 0x3, 0x3ff, 0x3, 0x9, 0x1, 0x7663bf3b, 0x200, 0x6, 0x0, 0xc00, 0x9, 0x8, 0x411, 0x0, 0x100, 0x7, 0x0, 0xfcba, 0xb, 0x7, 0x8, 0x1ff, 0x400, 0xfffffff8, 0xe8, 0x3, 0x0, 0x5563, 0xb, 0x40000000, 0x4, 0x7f, 0x7ff, 0x0, 0x0, 0x80000000, 0x93, 0x4, 0x1, 0x6, 0xff, 0x4aa, 0x9, 0xd0b, 0x5, 0x6, 0x0, 0x2, 0x6, 0x5eff, 0x80000001, 0x6, 0x6, 0xc00, 0x4, 0x0, 0xfff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8e, 0x81, 0x4, 0x4, 0x6, 0x3, 0xfffffffa, 0x1, 0x5, 0x669, 0xfffffffa, 0x8, 0x5, 0x9, 0xc256, 0xe, 0xb9f, 0x401, 0x7, 0x7, 0x7ff, 0xfffffffa, 0xbca, 0x9, 0xe, 0x400, 0x8, 0x1, 0x7fffffff, 0x1, 0x9, 0x1000, 0x34, 0x1, 0x7, 0x7, 0x40, 0x7fffffff, 0x1, 0x4, 0xc, 0x7, 0x3, 0x0, 0x8, 0xde, 0xe, 0x9, 0x4, 0x3, 0x7fff, 0x101, 0x40, 0x4, 0x1, 0x0, 0x10001, 0x1, 0xb, 0x6751130c, 0x9, 0xffffffff, 0x0, 0x2, 0x401, 0x3, 0x5, 0xfffffff7, 0x7fff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x4, 0x400000, 0xff9b, 0xdde, 0x1ed, 0x5, 0x8, 0x8, 0x9, 0x3, 0x200, 0x3, 0x2a, 0x1, 0x0, 0x1, 0x8, 0x3, 0xe7, 0x4, 0xb84, 0x401, 0x10001, 0x9da8, 0x10001, 0x8000000, 0x7, 0x8c7, 0x5, 0x1, 0x9, 0x8, 0xf, 0x7f, 0x400, 0x7ff, 0x0, 0x4, 0x9, 0x1, 0x6, 0x6, 0x200, 0x8, 0x81, 0x100, 0xfffffff0, 0x9, 0x1, 0x3, 0x7fffffff, 0x9, 0x9, 0xb, 0x2, 0x9, 0x1ff, 0x4, 0x12fecc84, 0x0, 0xc, 0x5, 0x9, 0xf6, 0x2, 0x6, 0x1, 0x6, 0x0, 0xff, 0xffff, 0x4, 0x8, 0x4, 0x7, 0x9, 0x3, 0x1000, 0xe7, 0x2, 0x29d, 0x8, 0x1, 0x81508000, 0x7, 0x7, 0x0, 0x8, 0x5165, 0x8, 0xf, 0x8, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x30dc631e, 0x0, 0x3, 0x2, 0xf, 0x9, 0x401, 0x6, 0x1, 0xff, 0xf0000000, 0xee, 0xfffffff7, 0x746a81a, 0x4, 0x78e, 0x6, 0x8000, 0xfffffffd, 0x2, 0x0, 0x4, 0x400, 0xbe1, 0xfffffbce, 0x6, 0x200, 0x10000, 0x7, 0x1, 0x100, 0xe, 0x1, 0xaa, 0x5, 0x5, 0x3, 0xffffffff, 0x6, 0x2, 0x10000, 0x9, 0x5, 0x4, 0x5, 0x1, 0x640, 0xfffffffe, 0x3, 0x10001, 0x2, 0x1, 0x5, 0x2, 0x4, 0x6, 0x5, 0x4a, 0x3, 0x9, 0x0, 0x9, 0x200000, 0x4, 0xe0, 0x4, 0x0, 0x1, 0x10000, 0xe1, 0x3, 0x8001, 0x7, 0x4fd, 0x22, 0xd, 0x6, 0x8, 0x0, 0x9e, 0x6, 0x457f, 0x0, 0x7]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}, @TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x8, 0x101, 0x8, 0x8c}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x676, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="50611010", @TCF_META_TYPE_VAR="d61ebf"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0xc0, 0x2}, {0x6, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="5f9c13aa70ce4a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1}, {0xfff, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="63df103e65ba1842ab29"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffc, 0xf7, 0x1}, {0xe, 0x9, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2}, {0x8, 0x3, 0x2, "c35852"}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x12c, 0x1, 0x4}, {0x100, 0x10001, 0xfff, 0x0, 0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}]}, @TCA_BASIC_EMATCHES={0x90, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0xb378, 0x9, 0xffe3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x81, 0x7, 0x8000}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xd, 0x7, 0x7f}, {{}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffa, 0x7, 0x100}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}]}, @TCA_BASIC_POLICE={0xca8, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8f5e, 0x8, 0x2, 0x3, 0x1, {0x22, 0x2, 0x1ff, 0x26ba, 0x9, 0x800000}, {0x9, 0x1, 0x100, 0xc, 0x401, 0x7}, 0x4, 0x7, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x0, 0x9, 0x7, {0xb0, 0x2, 0xd, 0x0, 0x2, 0x6}, {0x1, 0x3, 0x3, 0x8f9e, 0x2, 0x3215f2e8}, 0x1, 0xffff7fff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x931, 0x7, 0x47d0, 0x5, 0x1000, 0x2, 0xf1, 0x9, 0x6, 0x9, 0xb39, 0x9, 0x1, 0x7, 0x4, 0x6, 0xb, 0x6, 0x508b, 0x8, 0x7346, 0x8001, 0x1, 0x33b, 0x6, 0x3, 0x7f, 0x80, 0x40, 0x9, 0x7fff, 0x5, 0x3, 0x2, 0x53, 0x9, 0x7fffffff, 0x2, 0x34, 0x10000, 0x8, 0x5, 0x5, 0x7, 0x8, 0x2, 0x2, 0xec8, 0x3, 0x2, 0x0, 0x7, 0x40, 0x3, 0x1, 0x81, 0x0, 0x0, 0x1, 0x4e51c9bd, 0xfffffa3b, 0x1, 0x6, 0x4, 0x8, 0x9, 0x800, 0x3, 0x6, 0x1, 0x5, 0x2, 0x172e, 0x8, 0x1ff, 0x7f, 0x38000, 0x9, 0x100, 0x4, 0x0, 0x7, 0x1, 0x2, 0x6, 0x81, 0x0, 0x7, 0xcb6, 0x2, 0xfffffff7, 0x8191, 0x2, 0x0, 0x7f, 0x4, 0x7, 0x9, 0x1, 0x80000000, 0x80000000, 0x8, 0x7dc, 0x0, 0x1, 0x6c, 0x365b429e, 0x0, 0x0, 0x4, 0x9, 0x759f, 0x0, 0x0, 0x9, 0x3, 0x403, 0x6, 0x8, 0x800, 0x3, 0x7ff, 0x401, 0x7, 0x52, 0xec2, 0x2, 0x3, 0x7f, 0x1, 0x8001, 0x8401, 0x4eec9404, 0xfff, 0x58a, 0x1, 0x2, 0xffffffff, 0x3, 0x251, 0x1ff, 0x5fd1, 0x10, 0x2, 0x7a58, 0x3, 0x2, 0xf, 0x80000001, 0x10001, 0x3460, 0x6, 0x2, 0x0, 0xf1, 0x401, 0x422c, 0x0, 0x7, 0x5, 0x10, 0x0, 0x6f6, 0x7, 0x0, 0xfffffff7, 0x1, 0x9, 0x9, 0x7, 0x7, 0x2, 0xfc000000, 0x5, 0x32db, 0x6, 0x8, 0x2, 0x9, 0x80000, 0x80000001, 0x4, 0x1, 0x76b, 0x7, 0x4, 0x7fffffff, 0x6, 0x6, 0x8, 0x9, 0x4, 0x8, 0x6, 0xffff, 0xfff, 0x2, 0x10000, 0x9, 0x1, 0xfeb2, 0x1, 0x10000, 0x1, 0x9, 0xfffffcce, 0x101, 0x7, 0xe17f, 0x8, 0x7f, 0x7, 0x802, 0x3, 0x9, 0x8, 0x3, 0x3, 0x33c, 0x2, 0x7, 0x7, 0x5, 0x9, 0x5, 0x4, 0x3, 0x2, 0x28, 0x9, 0x6, 0x7f, 0x6, 0x40000000, 0x4, 0x1, 0x5, 0x9, 0x5, 0x2, 0xa, 0x7fff, 0xfffffffd, 0x68, 0x6, 0xfffffc00, 0xe, 0x3, 0x0, 0xd94, 0x7fffffff, 0xffff, 0x3, 0x6, 0x4, 0x4f198a45]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x10001, 0x9, 0xa4bd, 0x4, 0xd, 0x0, 0xf8000000, 0x1ff, 0x4, 0x0, 0xc, 0x2, 0xc, 0x2, 0x3, 0x1, 0x9, 0x0, 0x4, 0x5, 0xa, 0x4, 0xffffffff, 0xff, 0x278, 0x2, 0xfffffff9, 0xb16a, 0x9, 0xd, 0x4ca, 0xfffffffb, 0x6, 0x80000000, 0x3ff, 0x69ffffe, 0x1c83, 0xc, 0x5, 0x0, 0x40, 0x5, 0x3, 0x80, 0x8, 0x1, 0x1, 0x9, 0x142, 0x6, 0x7f4, 0x7, 0x9, 0x8, 0x3, 0xaa6cf97, 0x4, 0x7, 0x800, 0xffffff81, 0x1, 0x1, 0x432, 0x1, 0xfffffff8, 0x4f9, 0x8, 0x6, 0x7, 0x9f9e, 0x8, 0x6, 0x100, 0x3ff, 0x10, 0x1, 0x75, 0x7f, 0xcc8, 0xd, 0x1, 0x4, 0x3, 0x5, 0x400, 0x100, 0x4d, 0x3d0, 0x7fffffff, 0x6, 0xffffff6f, 0x1, 0x7, 0x7, 0xa6, 0x8, 0x1, 0x3, 0x4, 0x4, 0x7, 0x4, 0x5, 0x2, 0x3ff, 0xfffffff8, 0x217, 0x0, 0x3, 0xa89b, 0x2, 0x100, 0xe1, 0x798, 0x5, 0x1, 0xfffff000, 0x5, 0x6, 0x7, 0x5, 0x10, 0x0, 0x1, 0x10, 0x2, 0x46, 0x6, 0x8, 0xff, 0x74aa7ce2, 0xfffffffe, 0x80, 0x9, 0xfff, 0xd972, 0xfffff99a, 0x180000, 0x139, 0x0, 0x0, 0xd, 0xb, 0x7, 0x0, 0x7, 0x6, 0x2, 0x0, 0x1c, 0x4, 0xf5, 0x3ff, 0x5, 0x80000000, 0xe, 0x7, 0x2, 0x3, 0x1, 0x6, 0x2, 0x80, 0x15, 0xf, 0x80000000, 0x1, 0xd, 0x4, 0x7ff, 0x0, 0x4, 0xf, 0x3, 0x4, 0x6, 0x3, 0x3, 0x3, 0x0, 0x4, 0x3, 0x8, 0x80000001, 0x7ff, 0x0, 0x9, 0x3, 0x8, 0x7ff, 0x31af05ff, 0x8, 0x0, 0x31, 0x36, 0x5, 0x6, 0x4, 0x1ffc000, 0x4000020, 0x963, 0xfffffff8, 0x3, 0x4, 0xe4, 0x620, 0x6, 0x10001, 0x2, 0x57, 0x401, 0x600000, 0xe, 0x10000, 0x1, 0x6a6, 0x8000, 0x0, 0x500000, 0x3a9, 0xf2e, 0x7, 0x8, 0x7, 0x6, 0x0, 0xfff, 0x7ff, 0x4, 0x4, 0x9, 0x6, 0x8, 0x16bf, 0x4, 0x4, 0x0, 0x6, 0x10f, 0x563f, 0x3, 0xfffffc00, 0xbd2, 0x8a, 0x200, 0x289, 0x7fff000, 0x38000, 0x1, 0x0, 0x8, 0x1, 0x9693, 0x1, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x1ff, 0x5, 0x3, 0x73fa, 0x1, 0x5, 0x401, 0x2, 0x8, 0x3, 0x8, 0x4, 0x80000000, 0xfffffffd, 0x9, 0x2, 0xfffd, 0x4, 0xffff, 0xffffffb4, 0xffffffff, 0x4, 0x9, 0x8, 0x9, 0x5, 0x5, 0x7fffffff, 0xd, 0xfffc0000, 0xffffff7f, 0xf, 0x1, 0xb4, 0x0, 0x1a8, 0x0, 0x6, 0x1, 0x7fff, 0xff, 0x80000000, 0x5, 0x2, 0x4, 0x5, 0xff, 0xfffffffd, 0x8, 0x7ff, 0x4, 0x6, 0x3ff, 0x3, 0x8, 0xfff, 0x5, 0x0, 0x4, 0x8, 0x8, 0x4b91, 0x3, 0x6, 0x1ff, 0xab, 0x4, 0x8a, 0xd, 0xc22, 0x5, 0x8001, 0x6f2, 0x6d3d, 0x10, 0x4, 0x4f0e, 0x9, 0x2, 0x1, 0x4, 0x40, 0xe, 0x0, 0x7, 0x85, 0x7fff, 0x4, 0x0, 0x9, 0x1000, 0x4, 0x9, 0xe92c, 0x3, 0x4, 0x2, 0xfffffffa, 0x4a5, 0x6, 0x5, 0xffffffff, 0xc28, 0x80, 0x9, 0x0, 0xa, 0x5, 0x9, 0x9, 0x1000000, 0x8, 0x1, 0x7, 0x0, 0x7, 0x4, 0xffffffff, 0x8, 0x3, 0x6, 0x5838, 0x800, 0xde5c, 0x0, 0x3, 0x9, 0x3, 0x3, 0x6, 0xc, 0x9, 0x6e4, 0x2, 0xfffffff8, 0x80000000, 0x10000, 0xc, 0x4, 0x4, 0x350, 0x8001, 0xffff, 0x4, 0x80000000, 0xffffffff, 0x7, 0x1, 0x0, 0x2, 0x6, 0x81, 0x2, 0xfffff761, 0xba, 0x0, 0x2, 0xd1, 0x7f, 0xe9a, 0xff, 0x100, 0x0, 0x1, 0x8, 0x9e95, 0x100, 0x80, 0x82, 0x4b79, 0x772, 0x2, 0x401, 0xbb4, 0x5, 0x7, 0x9, 0x800, 0x10001, 0x40, 0x7f, 0x4, 0xfffffffc, 0x9, 0xfffeffff, 0x8, 0x7, 0xfffffffa, 0x7f, 0x6, 0x100, 0x9, 0xf, 0x84, 0x9, 0x8, 0x10000, 0x8, 0x4, 0x5, 0xffffff20, 0x5, 0x4, 0x0, 0x215, 0x8, 0x2, 0x200, 0xc7b, 0x94c, 0x7fff, 0x8, 0x1000, 0x8, 0x9, 0x4, 0x8, 0x6, 0x80000000, 0x307, 0x3, 0x7, 0x1, 0x5, 0x767, 0x6, 0x3, 0x7ff, 0xfffffff9, 0xf957, 0x9, 0x7ff, 0x8, 0x0, 0x2, 0x1, 0x8, 0x5, 0xe6, 0xb5, 0x6, 0xfffffffd, 0x5, 0x101, 0x9, 0x6, 0x6, 0x7, 0x7, 0x5a5, 0xfffffffa, 0x3, 0x1000, 0x8000, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}]}}]}, 0x40bc}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000080000000d"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="08000000100005070000000000c0d6c878f064ebcb97e2f2a8f3f5d7475f9dab9d3f5e831fbf6a2fcebd4203c38326983ca5a56e93bf4bef82f7815d690190b5d5302d13bc2040fa2454ccabf3f1a30a0a92d308e3c2cc9eb5e71c235c3a1035058d0237dca5c893e7b5", @ANYBLOB="c77faffd00d61b385ff87cd57bf19ff212984f13b25a9ea729f1811bc86692c4dacb111a2f1dc3d07d34065fa05397ef30a6270657bbd178972d854def9c90b7bfe7b099c0906667fcbcd219364cd4b952a7892e1b45c9a933a642137ebe44067a2c3099e3933c10ce1bc1f447498cba387e", @ANYRESOCT=r4], 0x48}}, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006114680000000000060000000000f1ff9400000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) socket$inet6(0xa, 0x5, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000081afff108"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.20486788s ago: executing program 2 (id=2638): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x899, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2c8101, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000540)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r3) (async) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711287000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a0001002abd7000fbdbdf250a808000000000000000000008001c00", @ANYRES32=0x0, @ANYBLOB="0800190032"], 0x7a}}, 0x20000050) (async, rerun: 64) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf257200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x2000c000) (async) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x120101c0}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x5c, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}}, 0x20000080) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (rerun: 64) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.988315641s ago: executing program 0 (id=2640): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000026c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) recvmmsg(r7, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) setsockopt$inet6_int(r7, 0x29, 0x49, &(0x7f0000000480)=0x5, 0x4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28030}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x7, 0x6, 0x506, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc54f}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2055bbba0080b912}, 0x4000890) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000b00)={0xa, 0x0, 0x3, @mcast1, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711298000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={0x0, @vsock={0x28, 0x0, 0x2710, @hyper}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='pim6reg0\x00', 0xe, 0x5, 0x9}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100003d0000000000000300000000000000", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.886850712s ago: executing program 2 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x44080) sendmsg$NFT_BATCH(r1, 0x0, 0x804) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000080000014000e280000000ac55dede509fcc2b71016c9acd43c2dc407be0f5267bb4f814e8dadd2fb4802e8c9401ef", @ANYRES64=r0, @ANYBLOB="00000000000000000000000000000000000000006ecf05f289e7d958917660be59b510acfd8cf2216c80d6321a08a09d75c953d0694b829295d72d5c79d1bc95d6b41c351334442c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) unshare(0x600) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000440)='dctcp\x00', 0x6) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000ff9bdf251a0000000400cc0008009a000100000008009a0096549296"], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x8045) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 2.876894887s ago: executing program 5 (id=2643): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0x2, 0x2f76}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x24a81}}}}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x50}}, 0x0) 2.806199146s ago: executing program 1 (id=2644): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000c2e000/0x4000)=nil, 0x4000, 0x8, 0x50, r0, 0x4c4ff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 2.646822347s ago: executing program 3 (id=2645): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004"], 0xb4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.587424675s ago: executing program 1 (id=2646): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x0, 0x4000000, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000f0ffffffffffffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000f0ffffffffffffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r3, r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000500)=@deltaction={0x128, 0x31, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x576}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x4}]}, 0x128}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000500)=@deltaction={0x128, 0x31, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x576}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x4}]}, 0x128}}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) (async) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600) (async) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r7, r9, 0xb, 0x0, @val=@iter={&(0x7f0000000340)=@cgroup={0x2, r10, 0x10001}, 0x10}}, 0x20) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 2.554236211s ago: executing program 0 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x100000, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0xc319}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x80) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r5, &(0x7f0000009d40)=[{{&(0x7f00000006c0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f00000002c0)}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000a00)=""/197, 0xc5}, {&(0x7f0000000b00)=""/233, 0xe9}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x6, &(0x7f0000000d80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000005180)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/162, 0xa2}, {&(0x7f0000002000)=""/206, 0xce}, {&(0x7f0000002100)=""/115, 0x73}, {&(0x7f000000b080)=""/4111, 0x1000}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000003180)=""/4083, 0xff3}, {&(0x7f0000004180)=""/4096, 0x1000}], 0x8, &(0x7f0000005200)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000000480)=""/10, 0x15}, {&(0x7f00000052c0)=""/80, 0x50}, {&(0x7f0000005340)=""/127, 0x7f}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/115, 0x73}], 0x5, &(0x7f00000064c0)}}, {{&(0x7f0000006540)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000065c0)=""/97, 0x61}, {&(0x7f0000006640)=""/157, 0x9d}], 0x2, &(0x7f00000064c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000006780)=@abs, 0x6e, &(0x7f0000007b40)=[{&(0x7f000000a040)=""/4100, 0x1004}, {&(0x7f0000007800)=""/153, 0x99}, {&(0x7f00000078c0)=""/118, 0x76}, {&(0x7f0000007940)=""/236, 0xec}, {&(0x7f0000007a40)=""/221, 0xdd}], 0x5, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000008d40)=[{&(0x7f0000000740)}, {&(0x7f0000007c40)}, {&(0x7f0000007c80)=""/123, 0x7b}, {&(0x7f0000007d00)=""/54, 0x36}, {&(0x7f0000007d40)=""/4096, 0x1000}], 0x5, &(0x7f0000008dc0)}}, {{&(0x7f0000008e80)=@abs, 0x6e, &(0x7f0000009600)=[{&(0x7f0000008f00)=""/255, 0xff}, {&(0x7f0000009000)=""/228, 0xe4}, {&(0x7f0000009100)=""/124, 0x7c}, {&(0x7f0000009180)=""/107, 0x6b}, {&(0x7f0000009200)=""/53, 0x35}, {&(0x7f0000009240)=""/3, 0x3}, {&(0x7f0000009280)=""/160, 0xa0}, {&(0x7f00000068c0)=""/183, 0xc2}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f0000009500)=""/209, 0xd1}], 0xa, &(0x7f0000009f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000097c0), 0x6e, &(0x7f0000009c80)=[{&(0x7f0000009840)=""/106, 0x6a}, {&(0x7f00000098c0)=""/8, 0x8}, {&(0x7f0000009900)=""/183, 0xb7}, {&(0x7f00000002c0)=""/18, 0x73}, {&(0x7f0000009a00)=""/83, 0x53}, {&(0x7f0000009a80)=""/154, 0x9a}, {&(0x7f0000009b40)=""/228, 0xe4}, {&(0x7f0000009c40)=""/39, 0x27}], 0x8, &(0x7f0000009d00)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x40000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="7891c00000000000000000b7040000f1ffffff84000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'macsec0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x2, 0xa000000, 0x3ff, 0x8, 0x6, 0x9, 0x80000000, 0x35}}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r8, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r8, 0x0, 0x41) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) 2.436793302s ago: executing program 3 (id=2648): unshare(0x36050400) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) unshare(0x800) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) unshare(0x36050400) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) unshare(0x800) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) 1.674720716s ago: executing program 3 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x4, 0x7) r2 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="a40100001b00000326bd7000fbdbdf25fe880000000000000000000000000001000000000000000000000000000000004e2000074e2200050a00a000040000008a88d77390b81b421345af9765ed256ef6d999125fbb1d3604d34278fbb89273a04c43761ada864ddde91ab7c174ebda371daad20d4b0a60ebab3c6687cc8bcd50541283b20b16ccc645f829bef66a9d61465b8e357e50dc297edc449835a574c5fd897a8d33e14e756f9944734ea81961ce1bba982940ea7f7985e7", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="04000000000000000200000000000000010000000000000004000000000000000100000000000000000000000000000017790000000000000f000000000000008f7ae35a000000000100000000000000010000000000000000100000000000000a000000b26b6e000100020100000000ff00000000000000e4000600fc020000000000000000000000000000640101010000000000000000000000004e2300014e2400050200208016000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fc010000000000000000000000000000000000036c0000007f000001000000000000000000000000010000000000000000000000000000000900000000000000010000000000000053d7000000000000010000000000000000000000010000000500000000000000080000000000000000800000000000006c8d00000000000000000000000000000600000006000000018000002abd7000ff340000020003030000000000000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x4000844) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x2001c810) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff05, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x1, 0x0, 0x8, 0x9, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x121000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cachefiles_tmpfile\x00', r9, 0x0, 0x8002}, 0x18) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) shutdown(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x105, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000080)="e3ca58d0f17842755db686622c28e5fd9233475e43a419cc8ddc54890c275c975d4e5a08b5f15d8f7553a2efb73646eab95095d34586cdb9eab7004a6e61befc12ce41a38826e969b69a3a7ad168340a4f8d92e8cf36cc9ef020869d87f1f96d932fee2a8d7972fb534c13f0813186432249ef70999758ad23fcd78996b818782353307f2f877041579f6a98013081c64f6e0a5eaa19249bc8ac3758464aa595b8369d2f7af4", 0xa6) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x21, 0x2, 0x2) 1.611908155s ago: executing program 1 (id=2650): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket(0x10, 0x3, 0x0) close(0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r3, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000c510000006000000181000fffffffffffff70658900000000000", @ANYRESHEX=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000d7030000100000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 1.585757938s ago: executing program 3 (id=2651): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) shutdown(r1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="408001", @ANYRES64=r3], 0x4) 1.226727775s ago: executing program 3 (id=2652): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x6, 0x48a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800110000000000000000000004a89d375bb16e53b256d0e800000000000000b52ff83128c8736e139d34a4c8743756385206fdf61478df47da34ba2abf60c5bc7bb1e3b528cb3d1ad548593e0ec1b98b469ce03432dca6d8611396b6c977c55b", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000200), &(0x7f0000000340)=r11}, 0x20) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xffbffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)={0x18, 0x14, 0x1, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r12, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) 1.034308078s ago: executing program 3 (id=2653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000010000003f0000000600000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e100000000000000000f0000000000000000000000000000000000f619b2b85a4ddbfc21937f30df8c59b7f7299ae7687cd2b7f083a7045b02b989cd0700983a45032d"], 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c000880", @ANYRESHEX], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) r3 = socket$pppoe(0x18, 0x1, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) (async) shutdown(0xffffffffffffffff, 0x1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) (async) unshare(0x24060400) unshare(0x42020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) (async) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000ae4beae329bde2f206d9e38344fe19d789885d819647402f7ceca21d6a206e7c5bfa10bb619aac11eef7b91bacb2aaec2d4ecd72a311cd21c5213500cb9f9bb56acd889f0a8e3bf701df0300275c908ddb5f975ed5caf9b11fa7d37a0f32bd81386b232887177f4df68e038d58917e04b92e9c8bcb00d3c59db0062caebb6fb5c0e825e8d5d3608a8d656f4ef39d0e1b160819cd7c44f6ce6abaf8fd5d24b39af2ec3f3509836f46562a86397b109e33c3bfc0f3f1ae336d35ef7358f530749d3dc76f16144a7b94410e92c82f8392b867711003568dfe3117817b964bcb054b73b8f3e0fe507f72d6c927c44de1d0cc169f778012b3a7642b2d27f77cc79277d1169092d39544d8712f62a14c1e928721af4ddac9d6912945ba49736b86c8d06ebc2bc44c0bb92ec258b7f72395d2bfd626f92ca89cddcdeb77ad0433b4d35d16bdace721060d9cab0e2b1cda4fe775", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200"/28], 0x50) 604.939827ms ago: executing program 1 (id=2654): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a"], 0x9c}}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a"], 0x9c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 534.78662ms ago: executing program 2 (id=2655): r0 = socket(0x1, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000072c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b80)}}, {{&(0x7f0000006cc0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000007200)}}], 0x5, 0x24008000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x4, 0xb, {{0x2b, 0x4, 0x0, 0x6, 0xac, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0x27, 0x92, [@multicast2, @multicast2, @local, @private=0xa010102, @multicast2, @multicast1, @multicast1, @loopback, @local]}, @cipso={0x86, 0x6f, 0x3, [{0x7, 0xb, "bdc8f3282e89046884"}, {0x6, 0xf, "019a17518a4328399ada082f71"}, {0x1, 0x7, "d2ff3ff24b"}, {0x0, 0xb, "102658383f2e088d1d"}, {0x6, 0xa, "0813e0b9d613177c"}, {0x2, 0x9, "a2901df5c63a2b"}, {0x2, 0x9, "dc119f17948622"}, {0x2, 0x10, "87ba17a4729ebae4f96892aa88de"}, {0x6, 0x5, '|6\t'}, {0x6, 0xc, "9bf7461d32c96b73a6d5"}]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r2, r3, 0x0, 0x5, 0x5}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0ed6", @ANYRES32], 0x50, 0x208d}}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c00c902000085000000b20000009500000000000000"], &(0x7f00000004c0)='GPL\x00'}, 0x90) 363.874735ms ago: executing program 2 (id=2656): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x96}]}, 0x28}, 0x1, 0x0, 0x0, 0x28090}, 0x26000010) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x8800) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 274.1173ms ago: executing program 1 (id=2657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b20, &(0x7f0000000040)) 194.882854ms ago: executing program 2 (id=2658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r3, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 146.457094ms ago: executing program 1 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50e14, 0x33822}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2e}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21903}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0x58}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x20044841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6fc3f7357bc9a4cc4653818f05fdc52b7f18ca733293b73e831de4ddaef161828fa7cbcf65df1999591963605961ed350c249600f4d197a81d24bfcd1626d7acddb259727dabfbd1340b26e3a904b8f94d612500d9f83130e380bcbd24226520f81141facf43d1ed6470b26a876751a4f147e8dc613ee7b45402762c51e9f04c5d05362d97f8042d89223e01f33f421691066ff0c79dfe13c5e554f489f2155f94e254e8b4eca163b7910b", @ANYRES16=r12, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) close(0x3) 0s ago: executing program 2 (id=2660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "eb53c1d55661f12860"}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="0100"], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) kernel console output (not intermixed with test programs): 0] bond6: (slave wlan0): failed to get link speed/duplex [ 234.483896][T10359] bond6: (slave wlan0): failed to get link speed/duplex [ 234.677838][ T2979] bond6: (slave wlan0): failed to get link speed/duplex [ 234.824064][ T9990] bond6: (slave wlan0): failed to get link speed/duplex [ 234.973831][T10359] bond6: (slave wlan0): failed to get link speed/duplex [ 235.113870][ T9990] bond6: (slave wlan0): failed to get link speed/duplex [ 235.179387][T10750] sctp: [Deprecated]: syz.3.1238 (pid 10750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.179387][T10750] Use struct sctp_sack_info instead [ 235.264623][ T2979] bond6: (slave wlan0): failed to get link speed/duplex [ 235.414398][ T8463] bond6: (slave wlan0): failed to get link speed/duplex [ 235.533600][ T9990] bond6: (slave wlan0): failed to get link speed/duplex [ 235.981068][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 236.130610][T10802] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20001 [ 236.605326][ T36] net_ratelimit: 4 callbacks suppressed [ 236.605346][ T36] bond6: (slave wlan0): failed to get link speed/duplex [ 236.832242][ T9990] bond6: (slave wlan0): failed to get link speed/duplex [ 236.933648][T10832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 236.996599][ T9990] bond6: (slave wlan0): failed to get link speed/duplex [ 237.404624][ T5185] Bluetooth: hci4: command 0x0406 tx timeout [ 237.629683][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 237.736308][T10845] erspan0: entered promiscuous mode [ 237.774618][T10845] erspan0: left promiscuous mode [ 237.927007][T10358] bond6: (slave wlan0): failed to get link speed/duplex [ 238.044508][ T8463] bond6: (slave wlan0): failed to get link speed/duplex [ 238.194789][ T36] bond6: (slave wlan0): failed to get link speed/duplex [ 238.304329][ T8463] bond6: (slave wlan0): failed to get link speed/duplex [ 238.346522][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1273'. [ 238.414966][T10359] bond6: (slave wlan0): failed to get link speed/duplex [ 238.466218][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 238.477047][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 238.732441][T10897] batman_adv: batadv0: Interface deactivated: dummy0 [ 238.865233][T10907] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.911286][T10907] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.921056][T10907] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.963746][T10359] bond6: (slave wlan0): failed to get link speed/duplex [ 239.041152][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 239.085172][ T36] bond6: (slave wlan0): failed to get link speed/duplex [ 239.605962][T10943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.618014][T10943] bond0: (slave bond5): Enslaving as an active interface with an up link [ 239.722378][T10958] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 239.758394][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 240.062140][T10971] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1297'. [ 240.857540][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 240.900219][T10995] ip6gre2: entered promiscuous mode [ 241.041593][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 241.112550][ T9990] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.156549][ T9990] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.185501][ T9990] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.214003][ T9990] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.250561][T11016] tipc: Enabled bearer , priority 0 [ 241.259262][T11016] syzkaller0: entered promiscuous mode [ 241.290517][T11016] syzkaller0: entered allmulticast mode [ 241.342281][T11025] netlink: 'syz.2.1310': attribute type 7 has an invalid length. [ 241.371398][T11025] netlink: 'syz.2.1310': attribute type 8 has an invalid length. [ 241.389500][T11025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1310'. [ 241.401387][T11016] tipc: Resetting bearer [ 241.472979][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 241.497310][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 241.540862][T11015] tipc: Resetting bearer [ 241.635166][T11015] tipc: Disabling bearer [ 241.683354][T11036] ip6tnl1: entered promiscuous mode [ 241.694931][T11036] ip6tnl1: entered allmulticast mode [ 241.886490][ T9990] net_ratelimit: 10 callbacks suppressed [ 241.886510][ T9990] bond6: (slave wlan0): failed to get link speed/duplex [ 242.033885][T10358] bond6: (slave wlan0): failed to get link speed/duplex [ 242.164552][ T9996] bond6: (slave wlan0): failed to get link speed/duplex [ 242.294529][ T9996] bond6: (slave wlan0): failed to get link speed/duplex [ 242.358077][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1328'. [ 242.378067][T11093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1328'. [ 242.402423][T11085] batman_adv: batadv0: Removing interface: dummy0 [ 242.439224][T11085] bond6: (slave wlan0): Releasing active interface [ 242.485407][T11085] team0: Port device bond4 removed [ 242.546505][T11104] netlink: 'syz.4.1325': attribute type 10 has an invalid length. [ 242.580553][T11103] bridge_slave_0: left allmulticast mode [ 242.597082][T11103] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 242.611765][T11103] gretap1: left promiscuous mode [ 242.630035][T11103] ip6gre2: left promiscuous mode [ 242.642609][T11103] ip6tnl1: left promiscuous mode [ 242.648327][T11103] ip6tnl1: left allmulticast mode [ 242.670259][T11104] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.060623][T11113] tipc: Enabled bearer , priority 0 [ 243.081341][T11113] syzkaller0: entered promiscuous mode [ 243.123444][T11113] syzkaller0: entered allmulticast mode [ 243.312970][T11113] tipc: Resetting bearer [ 243.325854][T11127] tipc: Enabled bearer , priority 10 [ 243.341554][T11128] tipc: Enabling of bearer rejected, already enabled [ 243.364921][T11112] tipc: Resetting bearer [ 243.418489][T11128] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1339'. [ 243.438604][T11132] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1341'. [ 243.490338][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 243.501644][T11112] tipc: Disabling bearer [ 243.900298][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 243.942678][T11164] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 244.114747][T11171] netlink: 'syz.1.1354': attribute type 8 has an invalid length. [ 244.287938][T11175] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 244.296751][T11175] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 244.305455][T11175] netlink: 'syz.4.1353': attribute type 2 has an invalid length. [ 244.463704][ T43] tipc: Node number set to 382730728 [ 244.480431][T11175] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.522179][T11175] team0: Port device bond7 added [ 244.721418][T11191] tipc: Enabled bearer , priority 0 [ 244.791168][T11187] tipc: Resetting bearer [ 244.852194][T11192] syzkaller0: entered promiscuous mode [ 244.867352][T11192] syzkaller0: entered allmulticast mode [ 244.907860][T11185] tipc: Resetting bearer [ 244.950173][T11209] netlink: 'syz.4.1364': attribute type 4 has an invalid length. [ 244.996360][T11185] tipc: Disabling bearer [ 245.661052][T11241] netlink: 'syz.3.1371': attribute type 12 has an invalid length. [ 245.669103][T11243] netlink: 'syz.3.1371': attribute type 12 has an invalid length. [ 246.128982][ T9990] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 246.406187][T11273] tipc: Enabling of bearer rejected, failed to enable media [ 246.422707][T11275] tun0: tun_chr_ioctl cmd 2148553947 [ 246.767550][T11292] netlink: 'syz.4.1383': attribute type 4 has an invalid length. [ 246.974605][T11299] __nla_validate_parse: 9 callbacks suppressed [ 246.974623][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 246.998674][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 247.012840][ T5185] Bluetooth: hci4: command 0x0406 tx timeout [ 247.061659][T11299] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1384'. [ 247.071290][T11299] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1384'. [ 247.080735][T11299] netlink: 'syz.1.1384': attribute type 6 has an invalid length. [ 247.138148][T11299] netlink: 'syz.1.1384': attribute type 4 has an invalid length. [ 247.184842][T11299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1384'. [ 247.208598][T11299] netlink: 'syz.1.1384': attribute type 9 has an invalid length. [ 247.234056][T11299] netlink: 'syz.1.1384': attribute type 7 has an invalid length. [ 247.255717][T11299] netlink: 'syz.1.1384': attribute type 8 has an invalid length. [ 247.469225][T11312] netlink: 'syz.1.1387': attribute type 7 has an invalid length. [ 247.493367][T11316] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1388'. [ 247.501824][T11312] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1387'. [ 247.641538][T11321] IPVS: Error connecting to the multicast addr [ 247.838051][T11323] tipc: Enabling of bearer rejected, media not registered [ 248.401038][T11345] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 248.412311][T11344] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.302600][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 249.328535][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 249.359905][T11374] 0ªX¹¦À: left allmulticast mode [ 249.441996][T11374] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 249.488207][T11374] geneve2: left promiscuous mode [ 249.515110][T11374] geneve2: left allmulticast mode [ 249.544467][T11374] gtp0: left promiscuous mode [ 249.587636][T11374] gtp0: left allmulticast mode [ 249.710254][T11374] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 249.738076][T11374] macvtap0: left allmulticast mode [ 249.783853][T11374] gretap1: left promiscuous mode [ 249.965583][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.980082][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.993753][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.030833][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.135816][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.153468][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.344440][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.352850][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.674689][T11406] validate_nla: 3 callbacks suppressed [ 250.674708][T11406] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 250.713547][T11406] netlink: 'syz.1.1414': attribute type 6 has an invalid length. [ 250.732043][T11409] netlink: 'syz.0.1413': attribute type 4 has an invalid length. [ 250.753963][T11406] netlink: 'syz.1.1414': attribute type 3 has an invalid length. [ 252.475737][T11462] __nla_validate_parse: 4 callbacks suppressed [ 252.475765][T11462] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1423'. [ 252.679031][T11466] netlink: 'syz.1.1425': attribute type 4 has an invalid length. [ 252.902257][T11478] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1427'. [ 253.515739][T11497] tun0: tun_chr_ioctl cmd 1074025672 [ 253.521094][T11497] tun0: ignored: set checksum disabled [ 253.728916][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 253.757245][T11508] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1436'. [ 253.767854][T11508] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 254.199335][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 254.223938][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'. [ 254.339501][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 254.820065][T11540] tipc: Enabled bearer , priority 0 [ 254.831601][T11540] syzkaller0: entered promiscuous mode [ 254.837875][T11540] syzkaller0: entered allmulticast mode [ 254.879381][T11540] tipc: Resetting bearer [ 254.902950][T11539] tipc: Resetting bearer [ 254.938902][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 254.959141][T11539] tipc: Disabling bearer [ 255.011881][T11547] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1449'. [ 255.064454][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 255.400317][T11561] tc_dump_action: action bad kind [ 255.781759][T11568] tipc: Enabled bearer , priority 0 [ 255.804574][T11568] syzkaller0: entered promiscuous mode [ 255.810390][T11568] syzkaller0: entered allmulticast mode [ 256.099261][T11584] veth3: entered promiscuous mode [ 256.188167][T11567] tipc: Resetting bearer [ 256.197900][T11586] netlink: zone id is out of range [ 256.203206][T11586] netlink: zone id is out of range [ 256.211566][T11586] netlink: zone id is out of range [ 256.219325][T11586] netlink: zone id is out of range [ 256.226880][T11586] netlink: zone id is out of range [ 256.232257][T11586] netlink: zone id is out of range [ 256.239041][T11567] tipc: Disabling bearer [ 256.250849][T11586] netlink: zone id is out of range [ 256.252711][T11595] netlink: del zone limit has 4 unknown bytes [ 256.372834][T11586] netlink: set zone limit has 4 unknown bytes [ 256.613096][T11619] sctp: [Deprecated]: syz.1.1467 (pid 11619) Use of int in max_burst socket option. [ 256.613096][T11619] Use struct sctp_assoc_value instead [ 256.819283][T11624] syzkaller1: entered allmulticast mode [ 256.852940][T11624] syzkaller1: left allmulticast mode [ 257.132853][T11644] tipc: Enabling of bearer rejected, failed to enable media [ 257.556662][T11661] syzkaller1: entered promiscuous mode [ 257.572857][T11661] syzkaller1: entered allmulticast mode [ 258.090189][T11688] __nla_validate_parse: 5 callbacks suppressed [ 258.090224][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 258.133233][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1485'. [ 258.264013][T11689] block nbd2: server does not support multiple connections per device. [ 258.281746][T11689] block nbd2: shutting down sockets [ 259.071762][T11719] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 259.289681][T11731] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 259.321613][T11731] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1496'. [ 259.475555][T11736] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1499'. [ 259.506320][T11737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1498'. [ 259.515262][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 259.533088][T11740] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.572265][T11740] tc_dump_action: action bad kind [ 259.689108][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 259.927454][T11758] wg2: entered promiscuous mode [ 259.932467][T11758] wg2: entered allmulticast mode [ 260.014752][T11763] netlink: 'syz.0.1510': attribute type 6 has an invalid length. [ 260.511373][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1514'. [ 260.631484][T11792] syzkaller0: entered promiscuous mode [ 260.645596][T11792] syzkaller0: entered allmulticast mode [ 261.358994][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'. [ 261.376786][T11828] netlink: 'syz.4.1523': attribute type 9 has an invalid length. [ 261.675807][T11838] netlink: 'syz.2.1527': attribute type 3 has an invalid length. [ 261.694254][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'. [ 263.356181][T11856] __nla_validate_parse: 1 callbacks suppressed [ 263.356199][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 263.380617][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 263.414021][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 263.423073][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 263.612760][T11862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.336770][T11892] syzkaller1: entered promiscuous mode [ 264.360263][T11892] syzkaller1: entered allmulticast mode [ 264.441983][T11894] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1540'. [ 264.730361][T11897] netlink: 'syz.0.1541': attribute type 10 has an invalid length. [ 264.817901][T11903] netlink: 'syz.1.1543': attribute type 7 has an invalid length. [ 264.830140][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 264.847385][T11897] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.856975][T11897] team0: entered promiscuous mode [ 264.862404][T11897] team0: entered allmulticast mode [ 264.875434][T11897] bond0: (slave team0): Enslaving as an active interface with an up link [ 264.885388][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.895090][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.905460][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.919953][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.927739][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.960913][ T5911] syz1: Port: 1 Link ACTIVE [ 265.016139][T11908] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.023705][T11908] bridge3: port 1(bond6) entered blocking state [ 265.034492][T11908] bridge3: port 1(bond6) entered disabled state [ 265.044288][T11908] bond6: entered allmulticast mode [ 265.054300][T11908] bridge3: port 1(bond6) entered blocking state [ 265.060684][T11908] bridge3: port 1(bond6) entered forwarding state [ 265.419855][ T36] bridge3: port 1(bond6) entered disabled state [ 265.691881][T11905] chnl_net:caif_netlink_parms(): no params data found [ 265.902251][T11947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1552'. [ 265.922805][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.930696][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.938517][T11905] bridge_slave_0: entered allmulticast mode [ 265.946947][T11905] bridge_slave_0: entered promiscuous mode [ 265.957131][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.964684][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.972270][T11905] bridge_slave_1: entered allmulticast mode [ 265.980968][T11905] bridge_slave_1: entered promiscuous mode [ 266.091981][T11905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.130025][T11905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.365854][T11905] team0: Port device team_slave_0 added [ 266.390931][T11905] team0: Port device team_slave_1 added [ 266.517321][T11969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'. [ 266.541492][T11966] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 266.563003][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.575675][T11966] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 266.586386][T11969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'. [ 266.641217][T11905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.664002][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.706127][T11905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.735929][T11905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.744677][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.779608][T11905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.003788][ T5185] Bluetooth: hci2: command tx timeout [ 267.023203][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 267.102952][T11905] hsr_slave_0: entered promiscuous mode [ 267.135784][T11905] hsr_slave_1: entered promiscuous mode [ 267.146246][T11905] debugfs: 'hsr0' already exists in 'hsr' [ 267.161491][T11905] Cannot create hsr debugfs directory [ 267.209325][T11984] vlan3: entered promiscuous mode [ 267.224261][T11984] vlan3: entered allmulticast mode [ 267.230032][T11984] hsr_slave_1: entered allmulticast mode [ 267.543034][T12005] bond7: (slave ip6gretap1): making interface the new active one [ 267.566675][T12005] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 267.619269][T12012] netlink: 'syz.3.1570': attribute type 4 has an invalid length. [ 267.677780][T12018] netlink: 'syz.1.1572': attribute type 7 has an invalid length. [ 268.316594][T11905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.330031][T11905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.349214][T11905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.368309][T11905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.735519][ T5185] Bluetooth: hci4: link tx timeout [ 268.741014][ T5185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 268.851005][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.881709][T11905] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.900730][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.908001][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.952681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.959923][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.085429][ T5878] Bluetooth: hci2: command tx timeout [ 269.190218][T12068] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 269.303573][ T30] audit: type=1800 audit(1756652867.189:5): pid=12061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1580" name="memory.events" dev="tmpfs" ino=1591 res=0 errno=0 [ 269.584495][T12084] ªªªªªª: renamed from wg2 (while UP) [ 269.750422][T11905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.809896][T12100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.817177][T12100] IPv6: NLM_F_CREATE should be set when creating new route [ 269.824491][T12100] IPv6: NLM_F_CREATE should be set when creating new route [ 269.831718][T12100] IPv6: NLM_F_CREATE should be set when creating new route [ 269.917566][T12106] netlink: set zone limit has 4 unknown bytes [ 270.171236][T12119] netlink: 'syz.1.1597': attribute type 4 has an invalid length. [ 270.235320][T12124] __nla_validate_parse: 1 callbacks suppressed [ 270.235341][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 270.320130][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 270.491313][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 270.576252][T11905] veth0_vlan: entered promiscuous mode [ 270.595600][T11905] veth1_vlan: entered promiscuous mode [ 270.636340][T11905] veth0_macvtap: entered promiscuous mode [ 270.648795][T11905] veth1_macvtap: entered promiscuous mode [ 270.668073][T11905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.684542][T11905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.702843][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.720680][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.745261][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.770967][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 270.799506][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.910654][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.925079][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.950625][T12143] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 270.999076][T10359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.005906][T12143] bond5: entered promiscuous mode [ 271.012922][T12143] bond5: entered allmulticast mode [ 271.021563][T12143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.046109][T12143] bridge3: entered promiscuous mode [ 271.051608][T10359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.051682][T12143] bridge3: entered allmulticast mode [ 271.066876][T12143] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 271.107416][ T8458] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.163997][ T5185] Bluetooth: hci2: command tx timeout [ 271.225478][ T2979] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.679413][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 272.243016][ T8458] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.264265][ T8458] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.316730][T12175] netlink: 'syz.5.1536': attribute type 4 has an invalid length. [ 272.361389][ T8458] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.378945][ T8458] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.405358][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1612'. [ 272.626713][T12191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 272.631172][T12193] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1616'. [ 272.650213][T12193] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1616'. [ 273.062227][T12213] openvswitch: netlink: IP tunnel dst address not specified [ 273.243759][ T5185] Bluetooth: hci2: command tx timeout [ 273.670014][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.710041][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.765701][T12233] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 275.110215][T12275] rdma_op ffff88807ca141f0 conn xmit_rdma 0000000000000000 [ 275.122167][T12275] netlink: 'syz.0.1633': attribute type 10 has an invalid length. [ 276.717875][T12273] bond0: (slave team0): Releasing backup interface [ 276.732103][T12273] team0: left promiscuous mode [ 276.738874][T12273] team0: left allmulticast mode [ 276.746801][T12273] bond5: (slave bridge3): Removing an active aggregator [ 276.755943][T12273] bond5: (slave bridge3): Releasing backup interface [ 276.778554][T12273] bridge3: left promiscuous mode [ 276.785446][T12273] bridge3: left allmulticast mode [ 276.815324][T12294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1636'. [ 276.957449][ T5911] syz1: Port: 1 Link DOWN [ 277.050872][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 277.120374][T12302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1638'. [ 277.134356][T12306] hsr_slave_0: left promiscuous mode [ 277.187750][T12306] hsr_slave_1: left promiscuous mode [ 277.281982][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 277.293315][T12302] hsr_slave_0: left promiscuous mode [ 277.337577][T12302] hsr_slave_1: left promiscuous mode [ 277.585876][ T6064] IPVS: starting estimator thread 0... [ 277.598775][T12321] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.692926][T12325] IPVS: using max 29 ests per chain, 69600 per kthread [ 277.818872][T12333] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1646'. [ 277.859385][T12341] netlink: 'syz.1.1649': attribute type 21 has an invalid length. [ 277.891476][T12341] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1649'. [ 278.402645][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 278.590135][T12358] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.885204][T12373] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1656'. [ 278.935920][T12377] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 278.950845][T12380] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1658'. [ 278.969556][T12377] netlink: 'syz.0.1659': attribute type 4 has an invalid length. [ 278.984164][T12379] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1658'. [ 279.001864][T12377] NCSI netlink: No device for ifindex 3321692160 [ 279.014827][T12358] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.049762][T12383] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 279.058566][T12379] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 279.190183][T12379] bond2 (unregistering): Released all slaves [ 279.408714][T12358] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.550712][T12399] netlink: 'syz.2.1665': attribute type 4 has an invalid length. [ 279.640982][T12358] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.065145][ T9990] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.147313][ T9990] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.190515][ T9990] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.217432][ T9990] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.597040][T12448] tipc: Enabled bearer , priority 0 [ 280.938746][T12447] tipc: Disabling bearer [ 281.034604][T12474] tipc: Started in network mode [ 281.054416][T12474] tipc: Node identity 7f000001, cluster identity 4711 [ 281.076378][T12474] tipc: Enabling of bearer rejected, failed to enable media [ 281.147388][T12477] lo speed is unknown, defaulting to 1000 [ 281.214789][T12477] lo speed is unknown, defaulting to 1000 [ 281.267808][T12486] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 281.336952][T12477] lo speed is unknown, defaulting to 1000 [ 281.408774][ T9996] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.438071][ T9996] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.466044][ T9996] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.492922][ T9996] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.582715][T12495] netlink: 'syz.0.1690': attribute type 2 has an invalid length. [ 281.881192][T12507] __nla_validate_parse: 11 callbacks suppressed [ 281.882591][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1693'. [ 282.093317][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1694'. [ 282.228087][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1694'. [ 282.242027][T12477] infiniband syz0: set active [ 282.251391][T12477] infiniband syz0: added lo [ 282.266010][T12477] syz0: rxe_create_cq: returned err = -12 [ 282.280198][T12477] infiniband syz0: Couldn't create ib_mad CQ [ 282.293749][ T6064] lo speed is unknown, defaulting to 1000 [ 282.334572][T12477] infiniband syz0: Couldn't open port 1 [ 282.398980][T12477] RDS/IB: syz0: added [ 282.409945][T12516] netlink: 'syz.0.1696': attribute type 4 has an invalid length. [ 282.427298][T12477] smc: adding ib device syz0 with port count 1 [ 282.474456][T12477] smc: ib device syz0 port 1 has pnetid [ 282.482529][T12477] lo speed is unknown, defaulting to 1000 [ 282.544314][ T8836] lo speed is unknown, defaulting to 1000 [ 282.636694][T12527] can: request_module (can-proto-0) failed. [ 282.815947][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1700'. [ 282.826860][T12538] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 283.085032][T12552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1704'. [ 283.242438][T12477] lo speed is unknown, defaulting to 1000 [ 283.794431][T12584] syzkaller0: entered allmulticast mode [ 283.865891][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 283.922479][T12592] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 284.074024][T12477] lo speed is unknown, defaulting to 1000 [ 284.417880][T12607] v: renamed from veth1_vlan (while UP) [ 284.508463][T12607] netlink: 17704 bytes leftover after parsing attributes in process `syz.2.1720'. [ 284.517785][T12607] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 284.734369][T12617] macvlan2: entered allmulticast mode [ 284.742796][T12617] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 284.758033][T12477] lo speed is unknown, defaulting to 1000 [ 285.120126][T12593] lo speed is unknown, defaulting to 1000 [ 285.348782][T12477] lo speed is unknown, defaulting to 1000 [ 285.706967][T12642] tipc: Enabled bearer , priority 0 [ 285.722682][T12642] syzkaller0: entered promiscuous mode [ 285.731460][T12642] syzkaller0: entered allmulticast mode [ 285.879562][T12648] tipc: Resetting bearer [ 285.920369][T12477] lo speed is unknown, defaulting to 1000 [ 285.941112][T12641] tipc: Resetting bearer [ 285.972706][T12641] tipc: Disabling bearer [ 286.401566][T12662] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1737'. [ 286.712956][T12668] workqueue: Failed to create a rescuer kthread for wq "nbd0-recv": -EINTR [ 286.715860][T12668] block (null): Could not allocate knbd recv work queue. [ 286.733938][T12673] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 286.759967][T12668] nbd: failed to add new device [ 286.777768][T12672] workqueue: Failed to create a rescuer kthread for wq "nbd0-recv": -EINTR [ 286.777855][T12672] block (null): Could not allocate knbd recv work queue. [ 286.785405][T12673] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 286.804924][T12672] nbd: failed to add new device [ 286.925587][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1743'. [ 286.991236][T12692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.042002][T12670] lo speed is unknown, defaulting to 1000 [ 287.297197][T12707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.409724][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 287.516525][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 287.699475][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 287.744220][T12716] netlink: 'syz.3.1749': attribute type 10 has an invalid length. [ 287.858168][T12725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1752'. [ 287.875683][T12725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1752'. [ 287.957582][T12728] syzkaller1: entered allmulticast mode [ 287.997512][T12727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.064174][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 288.096427][T12727] : entered promiscuous mode [ 288.477625][T12738] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1757'. [ 288.496115][T12738] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1757'. [ 289.183291][T12768] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1767'. [ 289.197471][T12764] netlink: 'syz.5.1766': attribute type 10 has an invalid length. [ 289.260560][T12771] netlink: 'syz.5.1766': attribute type 13 has an invalid length. [ 289.268899][T12771] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 289.509239][T12783] lo speed is unknown, defaulting to 1000 [ 289.688124][T12788] syzkaller1: entered allmulticast mode [ 291.440341][T12854] geneve3: entered promiscuous mode [ 291.453164][ T8463] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.490192][ T8463] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.531739][T12869] tipc: Enabling of bearer rejected, already enabled [ 291.552098][ T8463] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.581097][ T8463] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.684986][T12876] lo speed is unknown, defaulting to 1000 [ 291.697642][T12876] lo speed is unknown, defaulting to 1000 [ 291.712958][T12876] lo speed is unknown, defaulting to 1000 [ 291.775778][T12876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 291.868919][T12876] lo speed is unknown, defaulting to 1000 [ 291.888187][T12876] lo speed is unknown, defaulting to 1000 [ 291.910164][T12876] lo speed is unknown, defaulting to 1000 [ 291.948489][T12876] lo speed is unknown, defaulting to 1000 [ 291.979076][T12883] lo speed is unknown, defaulting to 1000 [ 291.996085][T12876] lo speed is unknown, defaulting to 1000 [ 292.012077][T12876] lo speed is unknown, defaulting to 1000 [ 292.055645][T12876] lo speed is unknown, defaulting to 1000 [ 292.072469][T12876] lo speed is unknown, defaulting to 1000 [ 292.292405][T12898] syzkaller0: entered promiscuous mode [ 292.312949][T12898] syzkaller0: entered allmulticast mode [ 292.350065][T12903] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 292.376172][T12902] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 292.488127][T12884] lo speed is unknown, defaulting to 1000 [ 292.549103][T12907] __nla_validate_parse: 5 callbacks suppressed [ 292.549120][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 292.668855][T12907] netlink: 'syz.1.1809': attribute type 18 has an invalid length. [ 292.860462][T12914] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:3 [ 294.057269][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 294.356057][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1821'. [ 294.428105][T12965] bond0: entered promiscuous mode [ 294.472598][T12965] bond_slave_0: entered promiscuous mode [ 294.546631][T12965] bond_slave_1: entered promiscuous mode [ 294.621438][T12965] bond0: left promiscuous mode [ 294.638813][T12965] bond_slave_0: left promiscuous mode [ 294.673314][T12965] bond_slave_1: left promiscuous mode [ 294.852072][T12980] lo speed is unknown, defaulting to 1000 [ 294.962776][T12989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.006715][T12989] netlink: 'syz.5.1824': attribute type 2 has an invalid length. [ 295.222555][T12980] lo speed is unknown, defaulting to 1000 [ 295.503031][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.510348][T13007] bridge0: port 2(bridge_slave_1) entered listening state [ 295.517913][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.525204][T13007] bridge0: port 1(bridge_slave_0) entered listening state [ 295.542488][T13007] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 295.734250][T13025] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1835'. [ 295.847354][T13019] lo speed is unknown, defaulting to 1000 [ 295.898400][T13034] tipc: Enabled bearer , priority 0 [ 295.955109][T13034] syzkaller0: entered promiscuous mode [ 295.992295][T13034] syzkaller0: entered allmulticast mode [ 296.054615][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1840'. [ 296.081149][T13034] tipc: Resetting bearer [ 296.084810][T13037] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1840'. [ 296.088959][T13034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.104430][T13034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.123228][T13039] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 296.166431][T13037] bridge0: port 3(vlan2) entered blocking state [ 296.172995][T13037] bridge0: port 3(vlan2) entered disabled state [ 296.180813][T13037] vlan2: entered allmulticast mode [ 296.214405][T13037] bridge0: entered allmulticast mode [ 296.224557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.233000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.260042][T13037] vlan2: left allmulticast mode [ 296.290488][T13037] bridge0: left allmulticast mode [ 296.311666][T13033] tipc: Resetting bearer [ 296.382604][T13033] tipc: Disabling bearer [ 296.715170][T13019] lo speed is unknown, defaulting to 1000 [ 296.820513][T13070] netlink: 'syz.3.1848': attribute type 2 has an invalid length. [ 296.829269][T13070] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 297.004246][T13070] netlink: 'syz.3.1848': attribute type 2 has an invalid length. [ 297.044755][T13070] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 297.240298][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'. [ 297.250936][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'. [ 297.271412][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'. [ 297.281949][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'. [ 297.719936][T13089] erspan0: entered promiscuous mode [ 297.750484][T13089] erspan0: left promiscuous mode [ 297.880257][T13093] syz_tun: entered allmulticast mode [ 297.921716][T13090] __nla_validate_parse: 1 callbacks suppressed [ 297.921737][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1855'. [ 297.942902][T13088] syz_tun: left allmulticast mode [ 298.032749][T13107] syz_tun: entered allmulticast mode [ 298.047283][T13107] dvmrp8: entered allmulticast mode [ 298.059259][T13106] syz_tun: left allmulticast mode [ 298.065106][T13106] dvmrp8: left allmulticast mode [ 298.246382][T13109] lo speed is unknown, defaulting to 1000 [ 298.315791][T13118] tipc: Enabled bearer , priority 0 [ 298.324840][T13118] syzkaller0: entered promiscuous mode [ 298.330346][T13118] syzkaller0: entered allmulticast mode [ 298.509078][T13117] tipc: Resetting bearer [ 298.542007][T13117] tipc: Disabling bearer [ 298.615884][T13126] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 298.631342][T13126] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 298.657943][T13125] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 298.812214][T13133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1869'. [ 299.042306][T13109] lo speed is unknown, defaulting to 1000 [ 299.471893][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 299.627670][T13162] netlink: 'syz.0.1878': attribute type 8 has an invalid length. [ 299.652390][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 299.927841][T13179] netlink: 'syz.1.1875': attribute type 4 has an invalid length. [ 299.961056][T13177] lo speed is unknown, defaulting to 1000 [ 299.972454][ T3097] lo speed is unknown, defaulting to 1000 [ 300.222472][T13198] netlink: 'syz.0.1884': attribute type 32 has an invalid length. [ 300.257929][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 300.299327][T13195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1884'. [ 300.316686][T13203] netlink: 'syz.2.1886': attribute type 12 has an invalid length. [ 300.431028][T13177] lo speed is unknown, defaulting to 1000 [ 300.440333][T13200] siw: device registration error -23 [ 300.515379][T13203] lo speed is unknown, defaulting to 1000 [ 301.098245][T13227] tipc: Enabled bearer , priority 0 [ 301.129327][T13227] syzkaller0: entered promiscuous mode [ 301.144122][T13227] syzkaller0: entered allmulticast mode [ 301.217374][T13229] tipc: Enabled bearer , priority 0 [ 301.226851][T13227] tipc: Resetting bearer [ 301.253272][T13227] tipc: Disabling bearer [ 301.276554][T13229] syzkaller0: entered promiscuous mode [ 301.282074][T13229] syzkaller0: entered allmulticast mode [ 301.309684][T13229] tipc: Resetting bearer [ 301.316709][T13203] lo speed is unknown, defaulting to 1000 [ 301.339859][T13228] tipc: Resetting bearer [ 301.484598][T13228] tipc: Disabling bearer [ 301.524372][T13206] lo speed is unknown, defaulting to 1000 [ 302.052967][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 302.075822][T13258] netlink: 'syz.3.1898': attribute type 2 has an invalid length. [ 302.236294][T13263] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1900'. [ 302.238773][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 302.266271][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 302.286404][T13260] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 302.334628][T13260] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.346568][T13260] block nbd2: shutting down sockets [ 302.384166][T13206] lo speed is unknown, defaulting to 1000 [ 302.807770][T13284] FAULT_INJECTION: forcing a failure. [ 302.807770][T13284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.843100][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.0.1905 Not tainted syzkaller #0 PREEMPT(full) [ 302.843128][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.843151][T13284] Call Trace: [ 302.843159][T13284] [ 302.843168][T13284] dump_stack_lvl+0x189/0x250 [ 302.843200][T13284] ? __pfx____ratelimit+0x10/0x10 [ 302.843222][T13284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.843247][T13284] ? __pfx__printk+0x10/0x10 [ 302.843276][T13284] ? __might_fault+0xb0/0x130 [ 302.843318][T13284] should_fail_ex+0x414/0x560 [ 302.843355][T13284] _copy_from_user+0x2d/0xb0 [ 302.843381][T13284] ___sys_sendmsg+0x158/0x2a0 [ 302.843408][T13284] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.843473][T13284] ? __fget_files+0x2a/0x420 [ 302.843491][T13284] ? __fget_files+0x3a0/0x420 [ 302.843521][T13284] __sys_sendmmsg+0x227/0x430 [ 302.843552][T13284] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.843615][T13284] ? rcu_is_watching+0x15/0xb0 [ 302.843641][T13284] __x64_sys_sendmmsg+0xa0/0xc0 [ 302.843667][T13284] do_syscall_64+0xfa/0x3b0 [ 302.843687][T13284] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.843707][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.843727][T13284] ? clear_bhb_loop+0x60/0xb0 [ 302.843752][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.843771][T13284] RIP: 0033:0x7f9b33b8ebe9 [ 302.843790][T13284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.843807][T13284] RSP: 002b:00007f9b31df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.843828][T13284] RAX: ffffffffffffffda RBX: 00007f9b33dc5fa0 RCX: 00007f9b33b8ebe9 [ 302.843843][T13284] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 302.843857][T13284] RBP: 00007f9b31df6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.843869][T13284] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 302.843881][T13284] R13: 00007f9b33dc6038 R14: 00007f9b33dc5fa0 R15: 00007ffdd87b6be8 [ 302.843915][T13284] [ 303.205916][T13286] __nla_validate_parse: 3 callbacks suppressed [ 303.205934][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1907'. [ 304.014877][T13312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1913'. [ 304.035270][T13312] netlink: 'syz.1.1913': attribute type 10 has an invalid length. [ 304.043122][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1913'. [ 304.090559][T13312] batman_adv: batadv0: Adding interface: virt_wifi0 [ 304.101229][T13312] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.134813][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'. [ 304.145267][T13312] batman_adv: batadv0: Interface activated: virt_wifi0 [ 304.160825][T13317] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 304.216832][T13317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.250603][T13317] bond2: (slave veth7): Enslaving as an active interface with a down link [ 304.272735][T13322] netlink: 'syz.1.1916': attribute type 6 has an invalid length. [ 304.286783][T13317] macvlan0: entered promiscuous mode [ 304.292112][T13317] macvlan0: entered allmulticast mode [ 304.532249][T13330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 304.559679][T13332] FAULT_INJECTION: forcing a failure. [ 304.559679][T13332] name failslab, interval 1, probability 0, space 0, times 0 [ 304.579750][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.3.1919 Not tainted syzkaller #0 PREEMPT(full) [ 304.579775][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.579787][T13332] Call Trace: [ 304.579794][T13332] [ 304.579808][T13332] dump_stack_lvl+0x189/0x250 [ 304.579836][T13332] ? __pfx____ratelimit+0x10/0x10 [ 304.579855][T13332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.579878][T13332] ? __pfx__printk+0x10/0x10 [ 304.579910][T13332] ? __pfx___might_resched+0x10/0x10 [ 304.579933][T13332] should_fail_ex+0x414/0x560 [ 304.579963][T13332] should_failslab+0xa8/0x100 [ 304.579992][T13332] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 304.580019][T13332] ? __alloc_skb+0x112/0x2d0 [ 304.580042][T13332] __alloc_skb+0x112/0x2d0 [ 304.580065][T13332] netlink_sendmsg+0x5c6/0xb30 [ 304.580094][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.580117][T13332] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.580137][T13332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.580157][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.580177][T13332] __sock_sendmsg+0x21c/0x270 [ 304.580206][T13332] ____sys_sendmsg+0x52d/0x830 [ 304.580234][T13332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.580265][T13332] ? import_iovec+0x74/0xa0 [ 304.580291][T13332] ___sys_sendmsg+0x21f/0x2a0 [ 304.580315][T13332] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.580375][T13332] ? __fget_files+0x2a/0x420 [ 304.580390][T13332] ? __fget_files+0x3a0/0x420 [ 304.580418][T13332] __sys_sendmmsg+0x227/0x430 [ 304.580445][T13332] ? __pfx___sys_sendmmsg+0x10/0x10 [ 304.580464][T13332] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 304.580512][T13332] ? ksys_write+0x22a/0x250 [ 304.580539][T13332] ? __pfx_ksys_write+0x10/0x10 [ 304.580560][T13332] ? rcu_is_watching+0x15/0xb0 [ 304.580586][T13332] __x64_sys_sendmmsg+0xa0/0xc0 [ 304.580609][T13332] do_syscall_64+0xfa/0x3b0 [ 304.580628][T13332] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.580646][T13332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.580664][T13332] ? clear_bhb_loop+0x60/0xb0 [ 304.580687][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.580705][T13332] RIP: 0033:0x7fb88fb8ebe9 [ 304.580721][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.580742][T13332] RSP: 002b:00007fb890a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.580761][T13332] RAX: ffffffffffffffda RBX: 00007fb88fdc5fa0 RCX: 00007fb88fb8ebe9 [ 304.580775][T13332] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 304.580788][T13332] RBP: 00007fb890a12090 R08: 0000000000000000 R09: 0000000000000000 [ 304.580799][T13332] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 304.580818][T13332] R13: 00007fb88fdc6038 R14: 00007fb88fdc5fa0 R15: 00007ffe93b0a628 [ 304.580849][T13332] [ 305.040444][T13339] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1923'. [ 305.164829][T13344] lo speed is unknown, defaulting to 1000 [ 305.648655][T13344] lo speed is unknown, defaulting to 1000 [ 305.656437][T13359] lo speed is unknown, defaulting to 1000 [ 305.954811][T13360] batadv_slave_1: entered promiscuous mode [ 305.971772][T13360] syzkaller0: entered promiscuous mode [ 305.977333][T13360] syzkaller0: entered allmulticast mode [ 305.987287][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 306.042447][T13360] macsec1: entered promiscuous mode [ 306.082614][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 306.121207][T13378] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 306.662845][T13398] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1938'. [ 306.682338][T13397] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 306.720277][T13398] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 306.836214][T13397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 306.845689][T13359] lo speed is unknown, defaulting to 1000 [ 306.845865][T13402] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 306.996270][T13404] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.019265][T13404] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 307.040260][T13404] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 307.124020][T13358] batadv_slave_1: left promiscuous mode [ 307.310716][T13408] veth7: entered promiscuous mode [ 307.381712][T13408] bond6: (slave veth7): Enslaving as an active interface with a down link [ 307.778024][T13424] syzkaller1: entered promiscuous mode [ 307.793804][T13424] syzkaller1: entered allmulticast mode [ 307.825498][T13424] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 307.927776][T13424] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.989659][T13430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.998195][T13430] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 308.010969][T13430] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 308.080573][T13424] veth9: entered promiscuous mode [ 308.098226][T13424] bond7: (slave veth9): Enslaving as an active interface with a down link [ 308.320304][T13442] syzkaller0: entered promiscuous mode [ 308.326809][T13442] syzkaller0: entered allmulticast mode [ 308.358538][T13449] tipc: Enabled bearer , priority 0 [ 308.405331][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1951'. [ 308.435438][T13454] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 308.465368][T13454] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1953'. [ 308.530231][T13442] tipc: Resetting bearer [ 308.602261][T13441] tipc: Resetting bearer [ 308.734513][T13441] tipc: Disabling bearer [ 309.065045][T13465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1955'. [ 309.129783][T13475] FAULT_INJECTION: forcing a failure. [ 309.129783][T13475] name failslab, interval 1, probability 0, space 0, times 0 [ 309.177284][T13475] CPU: 0 UID: 0 PID: 13475 Comm: syz.3.1959 Not tainted syzkaller #0 PREEMPT(full) [ 309.177316][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.177328][T13475] Call Trace: [ 309.177336][T13475] [ 309.177345][T13475] dump_stack_lvl+0x189/0x250 [ 309.177374][T13475] ? __pfx____ratelimit+0x10/0x10 [ 309.177411][T13475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.177436][T13475] ? __pfx__printk+0x10/0x10 [ 309.177472][T13475] ? __pfx___might_resched+0x10/0x10 [ 309.177491][T13475] ? fs_reclaim_acquire+0x7d/0x100 [ 309.177528][T13475] should_fail_ex+0x414/0x560 [ 309.177562][T13475] should_failslab+0xa8/0x100 [ 309.177595][T13475] __kmalloc_noprof+0xcb/0x4f0 [ 309.177621][T13475] ? fib6_info_alloc+0x30/0xf0 [ 309.177652][T13475] fib6_info_alloc+0x30/0xf0 [ 309.177679][T13475] ip6_route_info_create+0x142/0x860 [ 309.177706][T13475] ? inet6_rtm_newroute+0x2ee/0x18c0 [ 309.177737][T13475] inet6_rtm_newroute+0x47e/0x18c0 [ 309.177773][T13475] ? __lock_acquire+0xab9/0xd20 [ 309.177809][T13475] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 309.177857][T13475] ? is_bpf_text_address+0x26/0x2b0 [ 309.177930][T13475] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 309.177955][T13475] rtnetlink_rcv_msg+0x7cf/0xb70 [ 309.177975][T13475] ? __lock_acquire+0xab9/0xd20 [ 309.178006][T13475] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 309.178024][T13475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.178063][T13475] netlink_rcv_skb+0x208/0x470 [ 309.178081][T13475] ? __lock_acquire+0xab9/0xd20 [ 309.178111][T13475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.178133][T13475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.178166][T13475] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.178195][T13475] netlink_unicast+0x82c/0x9e0 [ 309.178235][T13475] ? __pfx_netlink_unicast+0x10/0x10 [ 309.178268][T13475] ? netlink_sendmsg+0x642/0xb30 [ 309.178286][T13475] ? skb_put+0x11b/0x210 [ 309.178312][T13475] netlink_sendmsg+0x805/0xb30 [ 309.178343][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.178368][T13475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.178390][T13475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.178412][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.178434][T13475] __sock_sendmsg+0x21c/0x270 [ 309.178467][T13475] ____sys_sendmsg+0x52d/0x830 [ 309.178497][T13475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.178533][T13475] ? import_iovec+0x74/0xa0 [ 309.178561][T13475] ___sys_sendmsg+0x21f/0x2a0 [ 309.178587][T13475] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.178661][T13475] ? __fget_files+0x2a/0x420 [ 309.178678][T13475] ? __fget_files+0x3a0/0x420 [ 309.178707][T13475] __sys_sendmmsg+0x227/0x430 [ 309.178737][T13475] ? __pfx___sys_sendmmsg+0x10/0x10 [ 309.178757][T13475] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 309.178812][T13475] ? ksys_write+0x22a/0x250 [ 309.178841][T13475] ? __pfx_ksys_write+0x10/0x10 [ 309.178864][T13475] ? rcu_is_watching+0x15/0xb0 [ 309.178891][T13475] __x64_sys_sendmmsg+0xa0/0xc0 [ 309.178917][T13475] do_syscall_64+0xfa/0x3b0 [ 309.178937][T13475] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.178956][T13475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.178975][T13475] ? clear_bhb_loop+0x60/0xb0 [ 309.178999][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.179018][T13475] RIP: 0033:0x7fb88fb8ebe9 [ 309.179036][T13475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.179053][T13475] RSP: 002b:00007fb890a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 309.179074][T13475] RAX: ffffffffffffffda RBX: 00007fb88fdc5fa0 RCX: 00007fb88fb8ebe9 [ 309.179089][T13475] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 309.179102][T13475] RBP: 00007fb890a12090 R08: 0000000000000000 R09: 0000000000000000 [ 309.179114][T13475] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 309.179126][T13475] R13: 00007fb88fdc6038 R14: 00007fb88fdc5fa0 R15: 00007ffe93b0a628 [ 309.179159][T13475] [ 310.187579][T13500] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 310.451303][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.483068][T13517] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 310.506848][T13517] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1972'. [ 310.525576][T13522] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1973'. [ 310.537953][T13517] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1972'. [ 310.576173][T13512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.599320][ T5911] lo speed is unknown, defaulting to 1000 [ 310.605863][ T5911] syz2: Port: 1 Link ACTIVE [ 310.631548][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 310.669554][T13512] veth0_to_team: entered promiscuous mode [ 310.684810][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 310.686559][T13512] veth0_to_team: entered allmulticast mode [ 310.692870][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 310.874686][T13530] lo speed is unknown, defaulting to 1000 [ 310.956399][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 310.971289][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 310.983109][T13536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.990501][T13536] IPv6: NLM_F_CREATE should be set when creating new route [ 310.993329][T13534] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1975'. [ 310.998984][T13536] IPv6: NLM_F_CREATE should be set when creating new route [ 311.797595][T13530] lo speed is unknown, defaulting to 1000 [ 311.901405][T13567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.064332][T13563] lo speed is unknown, defaulting to 1000 [ 312.310351][T13575] batman_adv: batadv0: Adding interface: dummy0 [ 312.335343][T13575] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.390139][T13575] batman_adv: batadv0: Interface activated: dummy0 [ 312.425321][T13576] batadv0: mtu less than device minimum [ 312.432693][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.444653][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.456486][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.468458][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.480368][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.492171][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.504132][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.516017][T13576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.599753][T13580] batman_adv: batadv0: Adding interface: ip6gretap2 [ 312.617770][T13580] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.670967][T13580] batman_adv: batadv0: Interface activated: ip6gretap2 [ 312.837738][T13563] lo speed is unknown, defaulting to 1000 [ 312.845577][T13554] infiniband syz!: set down [ 312.864244][T13554] infiniband syz!: added team_slave_0 [ 312.871428][T13554] syz!: rxe_create_cq: returned err = -12 [ 312.920375][T13554] infiniband syz!: Couldn't create ib_mad CQ [ 312.932212][T13554] infiniband syz!: Couldn't open port 1 [ 313.124495][T13554] RDS/IB: syz!: added [ 313.132033][T13554] smc: adding ib device syz! with port count 1 [ 313.151494][T13554] smc: ib device syz! port 1 has pnetid [ 313.289890][T13591] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 313.745953][T13594] __nla_validate_parse: 5 callbacks suppressed [ 313.745974][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1993'. [ 314.193022][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'. [ 314.283014][T13612] tipc: Enabled bearer , priority 0 [ 314.304849][T13612] syzkaller0: entered promiscuous mode [ 314.310444][T13612] syzkaller0: entered allmulticast mode [ 314.423224][T13617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2002'. [ 314.442608][T13612] tipc: Resetting bearer [ 314.518552][T13611] tipc: Resetting bearer [ 314.602291][T13611] tipc: Disabling bearer [ 314.836604][T13627] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2003'. [ 314.851600][T13627] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 314.911059][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2006'. [ 315.007423][T13638] nft_compat: unsupported protocol 0 [ 315.027214][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2006'. [ 315.071365][T13638] dummy0: entered promiscuous mode [ 315.080632][T13638] debugfs: 'hsr1' already exists in 'hsr' [ 315.086574][T13638] Cannot create hsr debugfs directory [ 315.092940][T13638] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 315.124543][T13638] hsr1: entered promiscuous mode [ 315.129690][T13638] hsr1: entered allmulticast mode [ 315.139760][T13638] bond0: entered allmulticast mode [ 315.157365][T13638] dummy0: entered allmulticast mode [ 315.290944][T13643] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.365574][T13643] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.467242][T13643] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.494099][T13643] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.529560][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2012'. [ 315.589534][T13660] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 315.614263][T13660] bridge5: entered promiscuous mode [ 315.638931][T13643] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.668364][T13643] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.821367][T13643] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.856423][T13674] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2017'. [ 315.870455][T13643] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.147459][ T9996] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.180853][ T9996] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.399196][T10358] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.434819][T10358] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.481753][ T9996] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.499995][ T9996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.540902][T10358] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.586790][T10358] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.679743][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.699963][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.718630][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.738377][T13701] netlink: 'syz.2.2022': attribute type 2 has an invalid length. [ 316.749315][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.770971][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.797883][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.826198][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.850422][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.865402][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.871413][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.903259][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.911394][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.917429][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.923123][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.933048][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.939620][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.946665][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.952358][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.959158][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.971355][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.980251][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 316.992535][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.000563][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.006786][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.012413][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.018492][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.025075][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.030770][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.036903][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.042577][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.048967][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.056752][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.062656][T13699] pimreg: tun_chr_ioctl cmd 2147767506 [ 317.093798][T13706] nbd2: detected capacity change from 0 to 63 [ 317.104676][T13707] block nbd2: NBD_DISCONNECT [ 317.122945][T13707] block nbd2: Disconnected due to user request. [ 317.144495][T13707] block nbd2: shutting down sockets [ 317.192044][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2024'. [ 317.233160][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2024'. [ 317.546279][T13727] netlink: 'syz.0.2030': attribute type 5 has an invalid length. [ 317.557361][T13724] tipc: Resetting bearer [ 317.565460][T13724] syzkaller0: left promiscuous mode [ 317.571496][T13727] netlink: 'syz.0.2030': attribute type 5 has an invalid length. [ 317.583238][T13724] netem: change failed [ 317.639550][ T8458] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.656272][ T8458] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.735499][ T8458] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.908936][ T8458] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.019629][T13793] __nla_validate_parse: 10 callbacks suppressed [ 319.019650][T13793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2049'. [ 319.038984][T13793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2049'. [ 319.059564][T13793] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2049'. [ 319.071266][T13793] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2049'. [ 319.646498][T13797] lo speed is unknown, defaulting to 1000 [ 319.980062][T13786] lo speed is unknown, defaulting to 1000 [ 319.986925][T13797] lo speed is unknown, defaulting to 1000 [ 320.141151][T13814] tipc: Enabling of bearer rejected, failed to enable media [ 320.350007][T13821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2058'. [ 320.396764][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 320.426573][T13821] net_ratelimit: 34 callbacks suppressed [ 320.426593][T13821] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 320.459556][T13666] lo speed is unknown, defaulting to 1000 [ 320.785628][T13667] lo speed is unknown, defaulting to 1000 [ 320.882803][T13837] vlan3: entered promiscuous mode [ 320.889575][T13837] bond0: entered promiscuous mode [ 320.903153][T13837] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 320.911582][T13837] team0: entered promiscuous mode [ 320.918279][T13837] bond5: entered promiscuous mode [ 320.924958][T13837] batadv0: entered promiscuous mode [ 320.930760][T13837] vlan3: entered allmulticast mode [ 320.936672][T13837] bond0: entered allmulticast mode [ 320.942018][T13837] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 320.949942][T13837] team0: entered allmulticast mode [ 320.956201][T13837] bond5: entered allmulticast mode [ 320.961400][T13837] batadv0: entered allmulticast mode [ 321.032696][T13667] lo speed is unknown, defaulting to 1000 [ 321.170284][T13831] lo speed is unknown, defaulting to 1000 [ 321.240124][T13666] lo speed is unknown, defaulting to 1000 [ 321.248151][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 321.272879][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 321.299600][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 321.355100][T13841] syzkaller0: entered promiscuous mode [ 321.370907][T13841] syzkaller0: entered allmulticast mode [ 321.552564][T13786] lo speed is unknown, defaulting to 1000 [ 322.095914][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 322.317338][T13831] lo speed is unknown, defaulting to 1000 [ 322.491400][T13853] tipc: Enabled bearer , priority 0 [ 322.514121][T13853] syzkaller0: entered promiscuous mode [ 322.519627][T13853] syzkaller0: entered allmulticast mode [ 322.530244][T13856] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 322.588239][T13856] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 322.808918][T13852] tipc: Resetting bearer [ 322.859711][T13852] tipc: Disabling bearer [ 322.986069][T13863] batadv0: entered promiscuous mode [ 323.033963][T13863] macvtap0: entered promiscuous mode [ 323.042187][T13863] macvtap0: entered allmulticast mode [ 323.061295][T13863] batadv0: entered allmulticast mode [ 323.072203][T13863] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 323.099747][T13864] batadv0: left allmulticast mode [ 323.116040][T13864] batadv0: left promiscuous mode [ 323.176611][T13867] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 323.534552][T13881] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 324.123001][T13893] __nla_validate_parse: 5 callbacks suppressed [ 324.123019][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 324.149735][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2080'. [ 324.440379][T13900] geneve2: entered promiscuous mode [ 324.461398][ T2979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.491683][ T2979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.525601][ T2979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.564808][ T2979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.830764][T13910] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 324.870375][T13910] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 325.287814][T13930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 325.325317][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.348484][T13939] netlink: 'syz.3.2093': attribute type 1 has an invalid length. [ 325.475091][T13939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.643104][T13951] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.674673][T13951] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 325.729857][T13951] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 325.989377][T13939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 325.997971][T13971] openvswitch: netlink: Message has 16 unknown bytes. [ 326.044376][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.051674][ C1] bridge0: topology change detected, propagating [ 326.058596][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.065871][ C1] bridge0: topology change detected, propagating [ 326.156564][T13939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.279079][T13974] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2102'. [ 326.326237][T13939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.399608][T13982] team0: Port device sit1 added [ 326.478945][T13939] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 326.565742][T13939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.651009][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 326.671876][T13990] netlink: 'syz.2.2107': attribute type 5 has an invalid length. [ 326.699223][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'. [ 326.720049][T13990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2107'. [ 326.760937][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 326.810855][T13990] geneve3: entered promiscuous mode [ 326.822540][T13990] geneve3: entered allmulticast mode [ 326.867707][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 326.892715][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2109'. [ 326.910356][T10359] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 326.942797][T10359] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 326.983012][T10359] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 327.002200][T10359] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 327.052210][ T8458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.118955][T13998] syzkaller0: entered promiscuous mode [ 327.134961][T13998] syzkaller0: entered allmulticast mode [ 327.150256][T14014] netlink: 'syz.2.2114': attribute type 4 has an invalid length. [ 327.200555][T14015] netlink: 'syz.2.2114': attribute type 4 has an invalid length. [ 327.242895][T14021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2115'. [ 328.787511][ T9996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.803245][ T9996] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.926681][ T9996] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.031194][T14028] lo speed is unknown, defaulting to 1000 [ 329.369474][T14046] netlink: 'syz.3.2120': attribute type 3 has an invalid length. [ 329.444305][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2120'. [ 330.446352][T14028] lo speed is unknown, defaulting to 1000 [ 330.627018][T14062] netlink: 'syz.5.2125': attribute type 1 has an invalid length. [ 330.758129][T14062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.782005][T14075] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 330.852306][T14062] netlink: 788 bytes leftover after parsing attributes in process `syz.5.2125'. [ 330.979384][T14075] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.031194][T14082] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 331.108336][T14082] bond7: (slave wlan0): Opening slave failed [ 331.171823][T14075] vlan4: entered allmulticast mode [ 331.190371][T14075] veth1: entered allmulticast mode [ 331.217815][T14075] bond7: (slave vlan4): Opening slave failed [ 331.950325][T14119] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 331.961000][T14120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2136'. [ 332.015432][T14119] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2135'. [ 332.160284][T14125] batman_adv: batadv0: Interface deactivated: dummy0 [ 332.164244][T14128] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.187853][T14125] batman_adv: batadv0: Removing interface: dummy0 [ 332.221755][T14125] batman_adv: batadv0: Removing interface: virt_wifi0 [ 332.240995][T14129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.267242][T14125] bond6: left allmulticast mode [ 332.272821][T14125] bridge3: port 1(bond6) entered disabled state [ 332.365347][T14125] bond7: (slave ip6gretap1): Releasing active interface [ 332.384422][T14135] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 332.392513][T14135] netlink: 'syz.3.2142': attribute type 2 has an invalid length. [ 332.435193][T14125] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 332.449076][T14137] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 332.489623][T14125] batman_adv: batadv0: Removing interface: ip6gretap2 [ 332.497900][T14137] netlink: 'syz.3.2142': attribute type 2 has an invalid length. [ 332.518960][T14137] netlink: 'syz.3.2142': attribute type 4 has an invalid length. [ 332.530055][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 332.550653][T14129] team0: Mode changed to "loadbalance" [ 332.596323][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2143'. [ 333.352208][T14164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 333.428798][T14166] syz_tun: entered allmulticast mode [ 333.491239][T14166] dvmrp8: entered allmulticast mode [ 333.568338][T14174] netlink: 'syz.5.2151': attribute type 13 has an invalid length. [ 333.577037][T14174] netlink: 'syz.5.2151': attribute type 17 has an invalid length. [ 333.661690][T14184] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2149'. [ 333.764296][T14186] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2152'. [ 333.947663][T14174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.016175][T14186] 0·: renamed from hsr0 [ 334.041075][T14186] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.071904][T14186] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.107129][T14186] 0·: entered allmulticast mode [ 334.112041][T14186] hsr_slave_0: entered allmulticast mode [ 334.127795][T14186] hsr_slave_1: entered allmulticast mode [ 334.152821][T14186] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 334.176655][T14166] lo speed is unknown, defaulting to 1000 [ 334.519369][T14165] syz_tun: left allmulticast mode [ 334.554563][T14165] dvmrp8: left allmulticast mode [ 334.656260][T14211] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 334.953290][T14226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'. [ 335.060474][T14166] lo speed is unknown, defaulting to 1000 [ 335.061107][T14188] lo speed is unknown, defaulting to 1000 [ 335.452753][T14240] FAULT_INJECTION: forcing a failure. [ 335.452753][T14240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.467196][T14240] CPU: 1 UID: 0 PID: 14240 Comm: syz.1.2167 Not tainted syzkaller #0 PREEMPT(full) [ 335.467240][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.467261][T14240] Call Trace: [ 335.467269][T14240] [ 335.467278][T14240] dump_stack_lvl+0x189/0x250 [ 335.467309][T14240] ? __pfx____ratelimit+0x10/0x10 [ 335.467330][T14240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.467353][T14240] ? __pfx__printk+0x10/0x10 [ 335.467399][T14240] ? __might_fault+0xb0/0x130 [ 335.467440][T14240] should_fail_ex+0x414/0x560 [ 335.467473][T14240] _copy_from_user+0x2d/0xb0 [ 335.467498][T14240] ___sys_sendmsg+0x158/0x2a0 [ 335.467525][T14240] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.467591][T14240] ? __fget_files+0x2a/0x420 [ 335.467608][T14240] ? __fget_files+0x3a0/0x420 [ 335.467638][T14240] __x64_sys_sendmsg+0x19b/0x260 [ 335.467665][T14240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.467700][T14240] ? __pfx_ksys_write+0x10/0x10 [ 335.467724][T14240] ? rcu_is_watching+0x15/0xb0 [ 335.467751][T14240] ? do_syscall_64+0xbe/0x3b0 [ 335.467778][T14240] do_syscall_64+0xfa/0x3b0 [ 335.467797][T14240] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.467817][T14240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.467837][T14240] ? clear_bhb_loop+0x60/0xb0 [ 335.467862][T14240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.467881][T14240] RIP: 0033:0x7f8eb958ebe9 [ 335.467899][T14240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.467917][T14240] RSP: 002b:00007f8eba43b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.467939][T14240] RAX: ffffffffffffffda RBX: 00007f8eb97c5fa0 RCX: 00007f8eb958ebe9 [ 335.467954][T14240] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 335.467966][T14240] RBP: 00007f8eba43b090 R08: 0000000000000000 R09: 0000000000000000 [ 335.467978][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.467989][T14240] R13: 00007f8eb97c6038 R14: 00007f8eb97c5fa0 R15: 00007fff5f80c6b8 [ 335.468023][T14240] [ 335.841927][T14188] lo speed is unknown, defaulting to 1000 [ 335.924320][T14246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2170'. [ 336.189553][T14253] bond0: (slave team0): Releasing backup interface [ 336.199576][T14253] team0: left promiscuous mode [ 336.209913][T14256] validate_nla: 1 callbacks suppressed [ 336.209931][T14256] netlink: 'syz.2.2172': attribute type 2 has an invalid length. [ 336.221538][T14253] team0: left allmulticast mode [ 336.233177][T14256] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.2172'. [ 336.241466][T14253] batman_adv: batadv0: Removing interface: dummy0 [ 336.265374][T14253] bond0: (slave batadv0): Releasing backup interface [ 336.296021][T14253] batadv0: left promiscuous mode [ 336.301216][T14253] batadv0: left allmulticast mode [ 336.368676][T14253] bond0: (slave wlan1): Releasing backup interface [ 336.402290][T14253] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 336.443225][T14253] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 336.450883][T14253] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 336.461639][T14253] bond0: (slave bond5): Releasing backup interface [ 336.469853][T14253] bond5: left promiscuous mode [ 336.475817][T14253] bond5: left allmulticast mode [ 336.486413][T14265] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.503474][T14265] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 336.664524][T14265] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.711800][T14265] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 336.759516][T14277] FAULT_INJECTION: forcing a failure. [ 336.759516][T14277] name failslab, interval 1, probability 0, space 0, times 0 [ 336.805189][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.3.2178 Not tainted syzkaller #0 PREEMPT(full) [ 336.805217][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.805229][T14277] Call Trace: [ 336.805236][T14277] [ 336.805244][T14277] dump_stack_lvl+0x189/0x250 [ 336.805272][T14277] ? __pfx____ratelimit+0x10/0x10 [ 336.805291][T14277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.805314][T14277] ? __pfx__printk+0x10/0x10 [ 336.805355][T14277] ? __pfx___might_resched+0x10/0x10 [ 336.805377][T14277] should_fail_ex+0x414/0x560 [ 336.805406][T14277] should_failslab+0xa8/0x100 [ 336.805434][T14277] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 336.805459][T14277] ? __alloc_skb+0x112/0x2d0 [ 336.805481][T14277] __alloc_skb+0x112/0x2d0 [ 336.805502][T14277] netlink_sendmsg+0x5c6/0xb30 [ 336.805529][T14277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.805550][T14277] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.805569][T14277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.805588][T14277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.805606][T14277] __sock_sendmsg+0x21c/0x270 [ 336.805634][T14277] ____sys_sendmsg+0x505/0x830 [ 336.805660][T14277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.805690][T14277] ? import_iovec+0x74/0xa0 [ 336.805731][T14277] ___sys_sendmsg+0x21f/0x2a0 [ 336.805756][T14277] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.805824][T14277] ? __fget_files+0x2a/0x420 [ 336.805840][T14277] ? __fget_files+0x3a0/0x420 [ 336.805866][T14277] __x64_sys_sendmsg+0x19b/0x260 [ 336.805889][T14277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.805918][T14277] ? __pfx_ksys_write+0x10/0x10 [ 336.805939][T14277] ? rcu_is_watching+0x15/0xb0 [ 336.805962][T14277] ? do_syscall_64+0xbe/0x3b0 [ 336.805984][T14277] do_syscall_64+0xfa/0x3b0 [ 336.806002][T14277] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.806018][T14277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.806035][T14277] ? clear_bhb_loop+0x60/0xb0 [ 336.806056][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.806073][T14277] RIP: 0033:0x7fb88fb8ebe9 [ 336.806089][T14277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.806104][T14277] RSP: 002b:00007fb890a12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.806129][T14277] RAX: ffffffffffffffda RBX: 00007fb88fdc5fa0 RCX: 00007fb88fb8ebe9 [ 336.806141][T14277] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 336.806151][T14277] RBP: 00007fb890a12090 R08: 0000000000000000 R09: 0000000000000000 [ 336.806162][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.806171][T14277] R13: 00007fb88fdc6038 R14: 00007fb88fdc5fa0 R15: 00007ffe93b0a628 [ 336.806200][T14277] [ 337.188484][T14265] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.200893][T14265] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 337.386669][T14265] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.405000][T14265] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 337.631356][T14290] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2183'. [ 337.671334][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.691227][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.744189][ T9986] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.787516][ T9986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.850091][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.909247][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.990903][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.014060][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.085747][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 338.095433][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 338.202478][T14308] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 338.209576][T14308] syzkaller0: linktype set to 1 [ 338.295181][T14312] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 338.316590][T14299] lo speed is unknown, defaulting to 1000 [ 338.417762][T14318] netlink: 'syz.3.2191': attribute type 83 has an invalid length. [ 338.613541][T14324] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2194'. [ 338.705885][T14329] netlink: 'syz.5.2195': attribute type 1 has an invalid length. [ 338.907434][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2197'. [ 339.005199][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 339.050489][T14348] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.114347][T14348] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.180087][T14299] lo speed is unknown, defaulting to 1000 [ 339.237616][T14348] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.260193][T14348] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.410260][T14348] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.421258][T14348] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.483324][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2203'. [ 339.522841][T14348] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.532885][T14348] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.600644][T14366] syzkaller1: entered promiscuous mode [ 339.606233][T14366] syzkaller1: entered allmulticast mode [ 339.757255][T14372] tipc: Enabled bearer , priority 0 [ 339.816527][T14372] syzkaller0: entered promiscuous mode [ 339.822050][T14372] syzkaller0: entered allmulticast mode [ 339.845393][T10358] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.865736][T10358] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.947959][T14372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 339.973011][T10358] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.981762][T10358] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.048076][T14382] netlink: 'syz.0.2210': attribute type 3 has an invalid length. [ 340.066440][T14372] tipc: Resetting bearer [ 340.079119][T10358] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.089255][T10358] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.098793][T10358] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.108128][T10358] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.126077][T14380] veth2: entered promiscuous mode [ 340.131266][T14380] veth2: entered allmulticast mode [ 340.179387][T14371] tipc: Resetting bearer [ 340.235374][T14371] tipc: Disabling bearer [ 340.710591][T14417] __nla_validate_parse: 4 callbacks suppressed [ 340.710610][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 340.741026][T14420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2221'. [ 340.992283][T14432] netlink: 'syz.0.2223': attribute type 5 has an invalid length. [ 341.065492][T14437] syzkaller0: entered promiscuous mode [ 341.084868][T14437] syzkaller0: entered allmulticast mode [ 341.094120][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2223'. [ 341.129304][T14442] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 341.148738][T14444] nbd: must specify a size in bytes for the device [ 341.164831][T14444] block nbd5: not configured, cannot reconfigure [ 341.293153][T14446] tipc: Enabled bearer , priority 0 [ 341.300930][T14446] syzkaller0: entered promiscuous mode [ 341.316622][T14446] syzkaller0: entered allmulticast mode [ 341.346497][T14450] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2230'. [ 341.394661][T14452] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2231'. [ 341.432049][T14455] netlink: 'syz.5.2230': attribute type 21 has an invalid length. [ 341.440340][T14455] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2230'. [ 341.608753][T14454] tipc: Resetting bearer [ 342.164447][T14445] tipc: Resetting bearer [ 342.316582][T14445] tipc: Disabling bearer [ 342.540696][T14503] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 342.921342][T14518] netlink: 'syz.2.2249': attribute type 6 has an invalid length. [ 343.057652][T14518] bond3: entered promiscuous mode [ 343.124955][T14518] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 343.594067][T14552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2255'. [ 343.708522][ T8836] lo speed is unknown, defaulting to 1000 [ 343.724200][T10358] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.734313][ T8836] syz0: Port: 1 Link DOWN [ 343.758047][T10358] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.785608][T10358] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.805241][T10358] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.822447][ T8836] lo speed is unknown, defaulting to 1000 [ 343.852029][T10358] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.861494][T10358] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 343.879596][T10358] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.890910][T10358] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.082087][T14567] lo speed is unknown, defaulting to 1000 [ 344.236540][T14573] syzkaller1: entered promiscuous mode [ 344.242076][T14573] syzkaller1: entered allmulticast mode [ 344.607281][T14567] lo speed is unknown, defaulting to 1000 [ 344.649910][ T9986] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 345.407374][T14603] netlink: 'syz.0.2267': attribute type 3 has an invalid length. [ 345.437368][T14603] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2267'. [ 345.526680][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 345.786892][T14621] bond0: option all_slaves_active: invalid value (7) [ 345.794153][T14621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2272'. [ 345.803116][T14621] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2272'. [ 345.834112][T14621] netlink: 'syz.1.2272': attribute type 5 has an invalid length. [ 345.841892][T14621] netlink: 'syz.1.2272': attribute type 6 has an invalid length. [ 345.911639][T14621] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2272'. [ 345.969114][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2275'. [ 345.987715][T14627] bridge0: entered allmulticast mode [ 346.471276][T14632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2278'. [ 346.511607][T14632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2278'. [ 346.598285][T14636] lo speed is unknown, defaulting to 1000 [ 346.625520][T14632] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2278'. [ 346.635543][T14632] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2278'. [ 346.749384][T14642] dvmrp8: entered allmulticast mode [ 346.949536][T14648] netlink: 'syz.2.2280': attribute type 23 has an invalid length. [ 347.045758][T14636] lo speed is unknown, defaulting to 1000 [ 347.053921][T14642] lo speed is unknown, defaulting to 1000 [ 347.570986][T14666] gretap1: entered promiscuous mode [ 347.598241][T14666] gretap1: entered allmulticast mode [ 347.662808][T14640] dvmrp8: left allmulticast mode [ 348.115361][T14677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2288'. [ 348.366003][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 348.383567][T14689] netlink: 'syz.1.2290': attribute type 13 has an invalid length. [ 348.402044][T14689] netlink: 'syz.1.2290': attribute type 11 has an invalid length. [ 348.413711][T14642] lo speed is unknown, defaulting to 1000 [ 349.055442][T14711] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 349.086323][T14710] team0: No ports can be present during mode change [ 349.344583][T14715] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 350.531028][T14747] tipc: Enabled bearer , priority 0 [ 350.572654][T14747] syzkaller0: entered promiscuous mode [ 350.589443][T14747] syzkaller0: entered allmulticast mode [ 350.775266][T14747] lo speed is unknown, defaulting to 1000 [ 350.814050][T14754] __nla_validate_parse: 7 callbacks suppressed [ 350.814068][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 351.264118][T14775] tipc: New replicast peer: 208.253.78.183 [ 351.288083][T14775] tipc: Enabled bearer , priority 10 [ 351.342660][T14744] tipc: Resetting bearer [ 351.486964][T14744] tipc: Disabling bearer [ 351.578910][T14747] lo speed is unknown, defaulting to 1000 [ 351.578952][T14771] lo speed is unknown, defaulting to 1000 [ 351.855478][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 352.120615][T14771] lo speed is unknown, defaulting to 1000 [ 354.011049][T14839] netlink: 'syz.2.2331': attribute type 2 has an invalid length. [ 354.074128][T14839] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2331'. [ 354.672412][T14857] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 354.681103][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.845962][T14863] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 354.890579][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2344'. [ 354.916525][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 354.961600][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 354.991166][T14870] bond0: entered promiscuous mode [ 355.004212][T14870] bond_slave_0: entered promiscuous mode [ 355.010269][T14870] bond_slave_1: entered promiscuous mode [ 355.038956][T14870] bond0: left promiscuous mode [ 355.044293][T14870] bond_slave_0: left promiscuous mode [ 355.076439][T14870] bond_slave_1: left promiscuous mode [ 355.142492][T14878] tipc: Enabling of bearer rejected, failed to enable media [ 355.199195][ T5931] IPVS: starting estimator thread 0... [ 355.305597][T14885] IPVS: using max 30 ests per chain, 72000 per kthread [ 355.456725][T14897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2349'. [ 355.516228][T14897] netlink: 'syz.1.2349': attribute type 3 has an invalid length. [ 355.618869][T14906] IPVS: Unknown mcast interface: hsr0 [ 355.697047][T14903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2352'. [ 355.880475][T14910] lo speed is unknown, defaulting to 1000 [ 356.031461][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 356.152058][T14925] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2358'. [ 356.165255][T14925] hsr_slave_0: left promiscuous mode [ 356.214185][T14925] hsr_slave_1: left promiscuous mode [ 356.592381][T14940] netlink: 'syz.5.2364': attribute type 1 has an invalid length. [ 356.600868][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 356.859580][T14910] lo speed is unknown, defaulting to 1000 [ 356.917919][T14940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.032766][T14938] bridge0 (unregistering): left allmulticast mode [ 357.183475][T14944] bond2: (slave geneve3): making interface the new active one [ 357.192984][T14944] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 357.204975][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2364'. [ 357.214435][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2364'. [ 357.224945][T14948] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2364'. [ 357.301336][T14950] syzkaller0: entered promiscuous mode [ 357.307864][T14950] syzkaller0: entered allmulticast mode [ 357.498850][T14973] team0: Failed to send options change via netlink (err -105) [ 357.518001][T14973] team0: Failed to send options change via netlink (err -105) [ 357.526432][T14973] team0: Mode changed to "activebackup" [ 357.723059][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'. [ 357.726589][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 357.732556][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'. [ 358.107267][T14992] ‚: renamed from bond_slave_0 [ 358.551212][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2374'. [ 358.600705][T15004] lo speed is unknown, defaulting to 1000 [ 359.120030][ T8458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.130669][ T8458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.139714][ T8458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.168392][ T8458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.780232][T15004] lo speed is unknown, defaulting to 1000 [ 359.911830][T15044] netlink: 'syz.2.2384': attribute type 29 has an invalid length. [ 359.947161][T15044] netlink: 'syz.2.2384': attribute type 29 has an invalid length. [ 360.316625][T15072] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 360.344911][T15072] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 361.056061][T15093] lo speed is unknown, defaulting to 1000 [ 361.119982][T15106] __nla_validate_parse: 3 callbacks suppressed [ 361.120002][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2401'. [ 361.396858][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2402'. [ 361.540677][T15113] netlink: 'syz.2.2403': attribute type 10 has an invalid length. [ 361.721647][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'. [ 361.761717][T15115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2404'. [ 361.904827][T15122] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.912376][T15122] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.268368][T15122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.288094][T15122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.363219][T15122] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 362.389558][T15122] geneve2: left promiscuous mode [ 362.401056][T15122] vlan2: left promiscuous mode [ 362.407045][T15122] gretap0: left promiscuous mode [ 362.421106][T15122] syzkaller0: left allmulticast mode [ 362.445755][T15122] vlan3: left promiscuous mode [ 362.450990][T15122] vlan3: left allmulticast mode [ 362.456715][T15122] hsr_slave_1: left allmulticast mode [ 362.469391][T15122] macvtap0: left promiscuous mode [ 362.475615][T15122] macvtap0: left allmulticast mode [ 362.485371][T15122] geneve3: left promiscuous mode [ 362.490337][T15122] geneve3: left allmulticast mode [ 362.502841][T15122] bond3: left promiscuous mode [ 362.537330][T15126] syz_tun: entered promiscuous mode [ 362.546036][T15126] batadv_slave_0: entered promiscuous mode [ 362.556103][T15126] hsr0: entered allmulticast mode [ 362.561463][T15126] syz_tun: entered allmulticast mode [ 362.570261][T15126] batadv_slave_0: entered allmulticast mode [ 362.578374][T15093] lo speed is unknown, defaulting to 1000 [ 362.585459][ T9987] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.614075][ T9987] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.638196][ T9987] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 362.674181][ T9987] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.693044][ T9987] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.720537][ T9987] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 362.747991][ T9987] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.764969][ T9987] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.785088][ T9987] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 362.795568][ T9987] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.807421][ T9987] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.817732][ T9987] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 362.899572][T15149] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2411'. [ 362.945116][T15149] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2411'. [ 363.040269][T15149] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 363.055236][T15149] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2411'. [ 363.562089][ T5185] Bluetooth: hci2: link tx timeout [ 363.568158][ T5185] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.580921][ T5878] Bluetooth: hci2: link tx timeout [ 363.587177][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.597141][ T5878] Bluetooth: hci2: link tx timeout [ 363.602290][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.611221][ T5878] Bluetooth: hci2: link tx timeout [ 363.616675][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.634982][ T5878] Bluetooth: hci2: link tx timeout [ 363.640178][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.649229][ T5878] Bluetooth: hci2: link tx timeout [ 363.654658][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.662319][ T5878] Bluetooth: hci2: link tx timeout [ 363.668133][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.699327][ T5878] Bluetooth: hci2: link tx timeout [ 363.706098][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.714305][ T5878] Bluetooth: hci2: link tx timeout [ 363.719459][ T5878] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.751165][T15164] lo speed is unknown, defaulting to 1000 [ 363.787870][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'. [ 364.401404][T15164] lo speed is unknown, defaulting to 1000 [ 365.051819][T15203] lo speed is unknown, defaulting to 1000 [ 365.644829][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 366.002378][T15203] lo speed is unknown, defaulting to 1000 [ 366.134819][T15236] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 366.373313][T15239] vlan4: entered promiscuous mode [ 366.392083][T15239] dummy0: entered promiscuous mode [ 366.422436][T15242] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 366.445460][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2433'. [ 366.813125][T15252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2436'. [ 366.858710][T15253] lo speed is unknown, defaulting to 1000 [ 367.139181][T15253] lo speed is unknown, defaulting to 1000 [ 367.742133][T15273] sctp: [Deprecated]: syz.0.2440 (pid 15273) Use of int in maxseg socket option. [ 367.742133][T15273] Use struct sctp_assoc_value instead [ 368.272084][T15277] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 368.700065][T15284] lo speed is unknown, defaulting to 1000 [ 368.896200][T15304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2447'. [ 369.062829][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2443'. [ 369.092586][T15285] netlink: 'syz.2.2443': attribute type 13 has an invalid length. [ 369.122041][T15285] netlink: 'syz.2.2443': attribute type 17 has an invalid length. [ 369.177820][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 369.371321][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.392000][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.420243][T15285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.517334][T15317] bond0: default FDB implementation only supports local addresses [ 369.563297][T15289] lo speed is unknown, defaulting to 1000 [ 369.578417][T15284] lo speed is unknown, defaulting to 1000 [ 369.773034][T15325] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2452'. [ 369.783164][T15325] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2452'. [ 369.933304][T15331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2454'. [ 369.956107][T15330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.142343][T15289] lo speed is unknown, defaulting to 1000 [ 370.144793][T15341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.919876][T15325] rdma_rxe: rxe_newlink: failed to add lo [ 371.919395][T15380] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 372.296862][T15380] veth9: entered promiscuous mode [ 372.315195][T15380] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 372.370507][T15382] bond4: (slave ip6gretap4): Enslaving as a backup interface with an up link [ 372.389298][ T8458] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 372.405537][T15385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.523771][ T9996] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 373.156473][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 373.255178][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2481'. [ 373.296348][T15436] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 373.298564][T15431] IPVS: stopping backup sync thread 15436 ... [ 373.983188][T15472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.019381][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2494'. [ 374.044975][T15473] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 374.247804][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 374.706080][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 375.414737][T15525] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 375.423121][T15525] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 375.629758][T15543] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 375.699183][T15547] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2517'. [ 375.910876][T15560] netlink: 14679 bytes leftover after parsing attributes in process `syz.3.2523'. [ 375.955595][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2522'. [ 376.501173][T15586] Bluetooth: MGMT ver 1.23 [ 376.593591][T15592] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 376.684507][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 376.720166][T15592] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.801273][T15596] bond9: (slave bridge0): making interface the new active one [ 376.847909][T15596] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 376.901557][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2529'. [ 376.932886][T15598] bond9: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 377.413663][T15611] nbd2: detected capacity change from 0 to 549764202496 [ 377.421989][ T5185] block nbd2: Receive control failed (result -32) [ 378.707240][T15665] lo speed is unknown, defaulting to 1000 [ 379.130506][T15665] lo speed is unknown, defaulting to 1000 [ 379.181934][T15678] pimreg: entered allmulticast mode [ 379.235168][T15684] pimreg: left allmulticast mode [ 379.382773][T15687] lo speed is unknown, defaulting to 1000 [ 379.816568][T15687] lo speed is unknown, defaulting to 1000 [ 380.271619][T15719] __nla_validate_parse: 3 callbacks suppressed [ 380.271639][T15719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2565'. [ 380.294122][T15719] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2565'. [ 380.318255][T15726] netlink: 'syz.5.2567': attribute type 16 has an invalid length. [ 380.326260][T15726] netlink: 'syz.5.2567': attribute type 3 has an invalid length. [ 380.335484][T15727] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2568'. [ 380.345116][T15726] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.2567'. [ 380.354572][T15727] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2568'. [ 380.373893][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'. [ 380.382995][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2567'. [ 380.441671][T15726] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 380.548770][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 381.228088][T15744] lo speed is unknown, defaulting to 1000 [ 382.559232][T15744] lo speed is unknown, defaulting to 1000 [ 382.712217][T15794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2584'. [ 382.854381][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 382.896584][T15796] lo speed is unknown, defaulting to 1000 [ 383.578727][T15796] lo speed is unknown, defaulting to 1000 [ 383.803242][T15829] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 384.005731][T15837] netlink: 'syz.0.2593': attribute type 3 has an invalid length. [ 384.221117][T15843] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 384.252144][T15835] pim6reg1: entered promiscuous mode [ 384.264230][T15835] pim6reg1: entered allmulticast mode [ 384.485065][T15850] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 384.515516][T15850] bond0: (slave team0): refused to change device type [ 384.536747][T15853] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 384.585635][T15853] syz_tun: entered promiscuous mode [ 384.601515][T15853] syz_tun: entered allmulticast mode [ 384.626102][T15853] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 384.732323][T15850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.140672][T15879] tipc: Enabling of bearer rejected, already enabled [ 385.172398][T15878] tipc: Enabling of bearer rejected, already enabled [ 385.193141][T15880] syzkaller0: entered promiscuous mode [ 385.204567][T15880] syzkaller0: entered allmulticast mode [ 385.349386][T15884] __nla_validate_parse: 3 callbacks suppressed [ 385.349405][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.390968][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.805931][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2612'. [ 385.889121][T15904] netlink: 'syz.5.2612': attribute type 2 has an invalid length. [ 385.989758][T15907] lo speed is unknown, defaulting to 1000 [ 386.012282][T15914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2615'. [ 386.297023][T15923] lo: tun_chr_ioctl cmd 1074025677 [ 386.320461][T15923] lo: linktype set to 776 [ 386.483225][T15935] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.567911][T15930] netlink: 192628 bytes leftover after parsing attributes in process `syz.1.2620'. [ 386.615563][T15940] netlink: 'syz.5.2622': attribute type 1 has an invalid length. [ 386.640318][T15940] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2622'. [ 386.677968][T15907] lo speed is unknown, defaulting to 1000 [ 386.907097][T15953] netem: incorrect ge model size [ 386.925318][T15953] netem: change failed [ 386.944575][T15955] netem: incorrect ge model size [ 386.956281][T15955] netem: change failed [ 387.240660][T15965] tipc: Enabled bearer , priority 0 [ 387.248433][T15965] syzkaller0: entered promiscuous mode [ 387.254347][T15965] syzkaller0: entered allmulticast mode [ 387.320423][T15965] tipc: Resetting bearer [ 387.352816][T15964] tipc: Resetting bearer [ 387.400824][T15964] tipc: Disabling bearer [ 387.454041][T15971] vcan1: entered promiscuous mode [ 387.459413][T15971] team0: Device vcan1 is of different type [ 387.640913][T15976] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 387.644514][T15978] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 387.835229][T15987] netlink: 'syz.2.2638': attribute type 28 has an invalid length. [ 387.884836][T15987] netlink: 'syz.2.2638': attribute type 28 has an invalid length. [ 387.929125][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 388.059317][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2641'. [ 388.083795][T15996] 8021q: VLANs not supported on gre0 [ 388.172177][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2642'. [ 388.279206][T16006] lo speed is unknown, defaulting to 1000 [ 388.328139][T16017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 388.605701][T16029] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 388.681215][T16029] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 388.746000][T16006] lo speed is unknown, defaulting to 1000 [ 388.751732][T16002] lo speed is unknown, defaulting to 1000 [ 388.780667][T16029] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 388.930259][T16029] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 389.052040][T10358] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.102497][T10360] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.133094][T10360] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.174418][T10358] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.337632][T16026] lo speed is unknown, defaulting to 1000 [ 389.396537][T16002] lo speed is unknown, defaulting to 1000 [ 389.762642][T16058] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.054863][T16026] lo speed is unknown, defaulting to 1000 [ 390.080463][T16061] lo speed is unknown, defaulting to 1000 [ 390.408825][T16067] __nla_validate_parse: 3 callbacks suppressed [ 390.408844][T16067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2654'. [ 390.462979][T16067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2654'. [ 390.587295][T16067] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 390.925051][T16080] team0: Port device gre3 added [ 390.944667][ T43] skbuff: skb_under_panic: text:ffffffff8a11e767 len:1184439180 put:1184439084 head:ffff88804d7d4000 data:ffff888006e42594 tail:0x120 end:0x6c0 dev:team0 [ 390.979562][T16082] validate_nla: 3 callbacks suppressed [ 390.979581][T16082] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 390.994419][ T43] ------------[ cut here ]------------ [ 391.000278][ T43] kernel BUG at net/core/skbuff.c:211! [ 391.024260][T16061] lo speed is unknown, defaulting to 1000 [ 391.038286][ T43] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 391.044580][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 391.053877][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.063964][ T43] Workqueue: mld mld_ifc_work [ 391.068705][ T43] RIP: 0010:skb_panic+0x157/0x160 [ 391.073758][ T43] Code: c7 00 f7 93 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 3e 0d f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 391.093381][ T43] RSP: 0018:ffffc90000b373f8 EFLAGS: 00010282 [ 391.099452][ T43] RAX: 0000000000000097 RBX: dffffc0000000000 RCX: bcec114243066f00 [ 391.107425][ T43] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 391.115400][ T43] RBP: 00000000000006c0 R08: ffffc90000b37107 R09: 1ffff92000166e20 [ 391.123369][ T43] R10: dffffc0000000000 R11: fffff52000166e21 R12: ffff888053ec4a10 [ 391.131343][ T43] R13: ffff88804d7d4000 R14: ffff888006e42594 R15: 0000000000000120 [ 391.139314][ T43] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 391.148245][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.154831][ T43] CR2: 0000001b33516ff8 CR3: 0000000076bd8000 CR4: 00000000003526f0 [ 391.162896][ T43] Call Trace: [ 391.166174][ T43] [ 391.169105][ T43] ? ipgre_header+0x67/0x290 [ 391.173706][ T43] ? ipgre_header+0x67/0x290 [ 391.178305][ T43] skb_push+0xc3/0xe0 [ 391.182296][ T43] ipgre_header+0x67/0x290 [ 391.186721][ T43] ? __pfx_ipgre_header+0x10/0x10 [ 391.191750][ T43] neigh_connected_output+0x286/0x460 [ 391.197139][ T43] ip6_finish_output2+0xfb3/0x1480 [ 391.202263][ T43] ? __pfx_ip6_finish_output2+0x10/0x10 [ 391.207813][ T43] ? ip6_mtu+0x7d/0x490 [ 391.211972][ T43] ? ip6_mtu+0x38c/0x490 [ 391.216230][ T43] ? ip6_finish_output+0x2ef/0x4e0 [ 391.221343][ T43] ? ip6_output+0x126/0x550 [ 391.225856][ T43] ip6_output+0x340/0x550 [ 391.230198][ T43] NF_HOOK+0x9e/0x380 [ 391.234195][ T43] ? NF_HOOK+0x101/0x380 [ 391.238453][ T43] ? __pfx_NF_HOOK+0x10/0x10 [ 391.243062][ T43] ? __pfx_dst_output+0x10/0x10 [ 391.247926][ T43] ? icmp6_dst_alloc+0x3a5/0x420 [ 391.252870][ T43] ? icmp6_dst_alloc+0x3a5/0x420 [ 391.257810][ T43] mld_sendpack+0x8d4/0xe60 [ 391.262329][ T43] ? mld_sendpack+0x1e7/0xe60 [ 391.267012][ T43] ? __pfx_mld_sendpack+0x10/0x10 [ 391.272140][ T43] mld_ifc_work+0x83e/0xd60 [ 391.276646][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.281844][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 391.287564][ T43] process_scheduled_works+0xae1/0x17b0 [ 391.293132][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.299135][ T43] worker_thread+0x8a0/0xda0 [ 391.303749][ T43] kthread+0x70e/0x8a0 [ 391.307829][ T43] ? __pfx_worker_thread+0x10/0x10 [ 391.312953][ T43] ? __pfx_kthread+0x10/0x10 [ 391.317579][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.322792][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.327992][ T43] ? __pfx_kthread+0x10/0x10 [ 391.332594][ T43] ret_from_fork+0x3f9/0x770 [ 391.337188][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 391.342316][ T43] ? __switch_to_asm+0x39/0x70 [ 391.347082][ T43] ? __switch_to_asm+0x33/0x70 [ 391.351855][ T43] ? __pfx_kthread+0x10/0x10 [ 391.356453][ T43] ret_from_fork_asm+0x1a/0x30 [ 391.361231][ T43] [ 391.364259][ T43] Modules linked in: [ 391.370303][ T43] ---[ end trace 0000000000000000 ]--- [ 391.391528][ T43] RIP: 0010:skb_panic+0x157/0x160 [ 391.400539][ T43] Code: c7 00 f7 93 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 3e 0d f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 391.426697][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2660'. [ 391.437990][ T43] RSP: 0018:ffffc90000b373f8 EFLAGS: 00010282 [ 391.445575][ T43] RAX: 0000000000000097 RBX: dffffc0000000000 RCX: bcec114243066f00 [ 391.532855][ T43] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 391.582801][ T43] RBP: 00000000000006c0 R08: ffffc90000b37107 R09: 1ffff92000166e20 [ 391.593005][T16083] bond6: (slave geneve4): making interface the new active one [ 391.602869][T16083] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 391.621170][T16085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.640094][ T43] R10: dffffc0000000000 R11: fffff52000166e21 R12: ffff888053ec4a10 [ 391.668282][ T43] R13: ffff88804d7d4000 R14: ffff888006e42594 R15: 0000000000000120 [ 391.686572][ T43] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 391.702942][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.709959][ T43] CR2: 00007f8eba3f9d58 CR3: 0000000076bd8000 CR4: 00000000003526f0 [ 391.718620][ T43] Kernel panic - not syncing: Fatal exception [ 391.725063][ T43] Kernel Offset: disabled [ 391.729382][ T43] Rebooting in 86400 seconds..